@agimon-ai/po-workflow 0.0.0-alpha.0 → 0.0.0-alpha.2

package/dist/extensions/server.cjs

@@ -48,7 +48,6 @@ let node_stream = require("node:stream");
 let _agimon_ai_po_core_packageApi = require("@agimon-ai/po-core/packageApi");
 let hono = require("hono");
 let hono_streaming = require("hono/streaming");
-let _agimon_ai_po_core_web = require("@agimon-ai/po-core/web");
 let node_url = require("node:url");
 let node_os = require("node:os");
 node_os = __toESM(node_os, 1);
@@ -1974,13 +1973,19 @@ const ARTIFACT_NAME_PARAM = ":name{.+}";
 * route follows the run's current step, which is one of a parallel group's.
 */
 const STEP_TARGET_PARAM = "step";
-var apiRoutes_default = (0, _agimon_ai_po_core_web.defineApiRoutes)({
+const routes = {
 	/**
 	* The terminal, as server-sent events.
 	*
 	* `stream: true` gets a URL and no call method: the consumer is the browser's
 	* own `EventSource`, and a relayed call would buffer a stream that never ends.
 	*/
+	snapshot: {
+		method: "GET",
+		path: `${RUN}/screen`,
+		query: [STEP_TARGET_PARAM],
+		response: void 0
+	},
 	screen: {
 		method: "GET",
 		path: `${RUN}/screen/stream`,
@@ -1990,7 +1995,7 @@ var apiRoutes_default = (0, _agimon_ai_po_core_web.defineApiRoutes)({
 	control: {
 		method: "POST",
 		path: `${RUN}/control`,
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	keys: {
 		method: "POST",
@@ -1999,23 +2004,23 @@ var apiRoutes_default = (0, _agimon_ai_po_core_web.defineApiRoutes)({
 	resize: {
 		method: "POST",
 		path: `${RUN}/resize`,
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	remove: {
 		method: "DELETE",
 		path: RUN,
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	stop: {
 		method: "POST",
 		path: `${RUN}/stop`,
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	/** Guidance for the agent session the running step is in, like steering a Team sub-agent. */
 	steer: {
 		method: "POST",
 		path: `${RUN}/steer`,
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	/**
 	* Launch a workflow into the mounting session's own runtime, which then owns
@@ -2024,27 +2029,27 @@ var apiRoutes_default = (0, _agimon_ai_po_core_web.defineApiRoutes)({
 	launch: {
 		method: "POST",
 		path: "/launch",
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	openRunDirectory: {
 		method: "POST",
 		path: `${RUN}/open-directory`,
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	artifacts: {
 		method: "GET",
 		path: `${RUN}/artifacts`,
 		query: ["directory"],
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	},
 	/** One artifact: its metadata and text, or its raw bytes under `raw=1`. */
 	artifact: {
 		method: "GET",
 		path: `${RUN}/artifacts/${ARTIFACT_NAME_PARAM}`,
 		query: ["raw", "download"],
-		response: (0, _agimon_ai_po_core_web.apiResponse)()
+		response: void 0
 	}
-});
+};
 //#endregion
 //#region src/types/webWorkflowTerminal.ts
 /**
@@ -2074,6 +2079,8 @@ const STAGES = [
 ];
 /** Lines of screen the stream sends, which is a terminal's visible height plus room. */
 const SCREEN_LINES = 48;
+/** Bound finite snapshots, including a maliciously wide terminal row. */
+const MAX_SCREEN_LINE_CHARS = 4096;
 /** How often the stream re-reads; the service coalesces, so this is an upper bound. */
 const STREAM_TICK_MS = 500;
 /** How often a settled run is re-checked before the stream closes itself. */
@@ -2176,7 +2183,29 @@ function createWorkflowHubApi(options = {}) {
 		} catch {}
 	};
 	const missing = (workspace, runKey) => ({ error: `No workflow run '${runKey}' in workspace '${workspace}'.` });
-	app.get(apiRoutes_default.screen.path, async (context) => {
+	app.get(routes.snapshot.path, async (context) => {
+		const workspace = context.req.param("workspace");
+		const runKey = context.req.param("runKey");
+		const record = await runOf(workspace, runKey);
+		if (record === void 0) return context.json(missing(workspace, runKey), 404);
+		const step = stepOf(context.req.query(STEP_TARGET_PARAM));
+		const target = {
+			record,
+			...step === void 0 ? {} : { step }
+		};
+		const capabilities = terminal.capabilities(target);
+		const captured = capabilities.readable ? await terminal.screen(runIdentityOf(workspace, runKey, step), target, SCREEN_LINES) : [];
+		const lines = captured.slice(-48).map((line) => line.slice(0, MAX_SCREEN_LINE_CHARS));
+		const truncated = captured.length > SCREEN_LINES || captured.some((line) => line.length > MAX_SCREEN_LINE_CHARS);
+		const snapshot = {
+			lines,
+			capabilities,
+			...record.stage === "running" ? {} : { ended: true },
+			...truncated ? { truncated: true } : {}
+		};
+		return context.json(snapshot);
+	});
+	app.get(routes.screen.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2217,7 +2246,7 @@ function createWorkflowHubApi(options = {}) {
 			if (latest.stage !== "running") terminal.forgetRun(identity);
 		});
 	});
-	app.post(apiRoutes_default.control.path, async (context) => {
+	app.post(routes.control.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2251,7 +2280,7 @@ function createWorkflowHubApi(options = {}) {
 		};
 		return context.json(held);
 	});
-	app.post(apiRoutes_default.keys.path, async (context) => {
+	app.post(routes.keys.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2269,7 +2298,7 @@ function createWorkflowHubApi(options = {}) {
 		}
 		return context.body(null, 204);
 	});
-	app.post(apiRoutes_default.resize.path, async (context) => {
+	app.post(routes.resize.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2288,7 +2317,7 @@ function createWorkflowHubApi(options = {}) {
 			return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);
 		}
 	});
-	app.post(apiRoutes_default.stop.path, async (context) => {
+	app.post(routes.stop.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2301,7 +2330,7 @@ function createWorkflowHubApi(options = {}) {
 		}
 		return context.json({ requested: true });
 	});
-	app.post(apiRoutes_default.steer.path, async (context) => {
+	app.post(routes.steer.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2322,12 +2351,12 @@ function createWorkflowHubApi(options = {}) {
 		}
 		return context.json({ delivered: true });
 	});
-	app.post(apiRoutes_default.launch.path, async (context) => {
+	app.post(routes.launch.path, async (context) => {
 		if (options.launch === void 0) return context.json({ error: "Launching needs the mount of a session with a workflow runtime." }, 409);
 		const response = await options.launch(await jsonBody(context));
 		return context.json(response);
 	});
-	app.delete(apiRoutes_default.remove.path, async (context) => {
+	app.delete(routes.remove.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2345,7 +2374,7 @@ function createWorkflowHubApi(options = {}) {
 		}
 		return context.json({ deleted: true });
 	});
-	app.post(apiRoutes_default.openRunDirectory.path, async (context) => {
+	app.post(routes.openRunDirectory.path, async (context) => {
 		if ((0, _agimon_ai_po_core_packageApi.doomApiCallerFrom)(context.req.raw.headers)?.locality !== "local") return context.json({ error: "Opening Finder is only available on the host." }, 403);
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
@@ -2370,7 +2399,7 @@ function createWorkflowHubApi(options = {}) {
 			return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);
 		}
 	});
-	app.get(apiRoutes_default.artifacts.path, async (context) => {
+	app.get(routes.artifacts.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2389,7 +2418,7 @@ function createWorkflowHubApi(options = {}) {
 			return context.json({ error: error instanceof Error ? error.message : String(error) }, 409);
 		}
 	});
-	app.get(apiRoutes_default.artifact.path, async (context) => {
+	app.get(routes.artifact.path, async (context) => {
 		const workspace = context.req.param("workspace");
 		const runKey = context.req.param("runKey");
 		const record = await runOf(workspace, runKey);
@@ -2398,7 +2427,7 @@ function createWorkflowHubApi(options = {}) {
 		const requested = context.req.param("name");
 		const resolved = resolveInside(runDir, requested);
 		if (resolved === void 0) return context.json({ error: `'${requested}' is not inside this run.` }, 400);
-		if (context.req.query("raw") === "1") return streamArtifact(resolved, requested, context.req.header("range"), context.req.query("download") === "1") ?? context.json({ error: `'${requested}' has not been written.` }, 404);
+		if (context.req.query("raw") === "1") return streamArtifact(resolved, requested, context.req.header("range"), context.req.query("download") === "1", context.req.header("if-match")) ?? context.json({ error: `'${requested}' has not been written.` }, 404);
 		const body = readArtifact(resolved, requested);
 		if (body === void 0) return context.json({ error: `'${requested}' has not been written.` }, 404);
 		return context.json(body);
@@ -2520,14 +2549,26 @@ function readArtifact(resolved, requested) {
 	};
 }
 /** Streams media with byte-range support so browser audio, video, and PDF controls can seek. */
-function streamArtifact(resolved, requested, rangeHeader, download) {
+function streamArtifact(resolved, requested, rangeHeader, download, expectedVersion) {
 	const stats = statOf(resolved);
 	if (stats === void 0 || stats.isDirectory()) return void 0;
+	const version = `"${stats.dev}-${stats.ino}-${stats.size}-${stats.mtimeMs}-${stats.ctimeMs}"`;
+	if (expectedVersion !== void 0 && expectedVersion !== version) return new Response(null, {
+		status: 412,
+		headers: { etag: version }
+	});
 	const mimeType = artifactMimeType(requested);
 	let start = 0;
 	let end = Math.max(0, stats.size - 1);
 	let partial = false;
 	const match = rangeHeader?.match(/^bytes=(\d*)-(\d*)$/);
+	if (rangeHeader !== void 0 && (!match || !match[1] && !match[2] || [match[1], match[2]].some((value) => value !== "" && !Number.isSafeInteger(Number(value))) || stats.size === 0)) return new Response(null, {
+		status: 416,
+		headers: {
+			etag: version,
+			"content-range": `bytes */${stats.size}`
+		}
+	});
 	if (match !== null && match !== void 0 && stats.size > 0) {
 		const requestedStart = match[1] === "" ? void 0 : Number(match[1]);
 		const requestedEnd = match[2] === "" ? void 0 : Number(match[2]);
@@ -2536,7 +2577,7 @@ function streamArtifact(resolved, requested, rangeHeader, download) {
 			start = requestedStart;
 			end = requestedEnd === void 0 ? end : Math.min(requestedEnd, end);
 		}
-		if (start >= stats.size || start > end) return new Response(null, {
+		if (!Number.isSafeInteger(start) || !Number.isSafeInteger(end) || start >= stats.size || start > end) return new Response(null, {
 			status: 416,
 			headers: { "content-range": `bytes */${String(stats.size)}` }
 		});
@@ -2544,6 +2585,7 @@ function streamArtifact(resolved, requested, rangeHeader, download) {
 	}
 	const filename = node_path.default.basename(requested).replace(/["\\\r\n]/g, "_");
 	const headers = new Headers({
+		etag: version,
 		"accept-ranges": "bytes",
 		"content-disposition": `${download || mimeType === "text/html" ? "attachment" : "inline"}; filename="${filename}"`,
 		"content-length": String(stats.size === 0 ? 0 : end - start + 1),
@@ -2555,6 +2597,44 @@ function streamArtifact(resolved, requested, rangeHeader, download) {
 		status: 200,
 		headers
 	});
+	if (expectedVersion !== void 0) {
+		if (!partial || end - start + 1 > 1048576) return new Response(null, {
+			status: 416,
+			headers: {
+				etag: version,
+				"content-range": `bytes */${stats.size}`
+			}
+		});
+		const fd = node_fs.default.openSync(resolved, "r");
+		try {
+			const opened = node_fs.default.fstatSync(fd);
+			if (`"${opened.dev}-${opened.ino}-${opened.size}-${opened.mtimeMs}-${opened.ctimeMs}"` !== expectedVersion) return new Response(null, {
+				status: 412,
+				headers: { etag: version }
+			});
+			const bytes = new Uint8Array(end - start + 1);
+			let read = 0;
+			while (read < bytes.length) {
+				const count = node_fs.default.readSync(fd, bytes, read, bytes.length - read, start + read);
+				if (count === 0) return new Response(null, {
+					status: 412,
+					headers: { etag: version }
+				});
+				read += count;
+			}
+			const after = node_fs.default.fstatSync(fd);
+			if (after.size !== opened.size || after.mtimeMs !== opened.mtimeMs || after.ctimeMs !== opened.ctimeMs) return new Response(null, {
+				status: 412,
+				headers: { etag: version }
+			});
+			return new Response(bytes, {
+				status: 206,
+				headers
+			});
+		} finally {
+			node_fs.default.closeSync(fd);
+		}
+	}
 	const body = node_stream.Readable.toWeb(node_fs.default.createReadStream(resolved, {
 		start,
 		end
@@ -3305,7 +3385,7 @@ function createWorkflowServerRuntime(host, serverHost) {
 		const response = await serverHost.context.requestApi({
 			scope: "session",
 			sessionId: owner
-		}, WORKFLOW_API_BASE_PATH, new Request(`${IN_PROCESS_ORIGIN}${apiRoutes_default.launch.path}`, {
+		}, WORKFLOW_API_BASE_PATH, new Request(`${IN_PROCESS_ORIGIN}${routes.launch.path}`, {
 			method: "POST",
 			headers: { "content-type": "application/json" },
 			body: JSON.stringify(parameters)