@aitne/daemon 0.1.0

package/dist/api/json-body.d.ts

@@ -0,0 +1,29 @@
+import type { Context } from "hono";
+/**
+ * Read a JSON body off a Hono request. On parse failure, return a 400
+ * `invalid_json_body` response carrying the parser's error message and
+ * log one warning line.
+ *
+ * Surfacing the parse error (rather than letting Hono's default 500
+ * handler swallow it) is how agents learn their body shape is wrong
+ * and self-correct. Regression origin: a setup.initial session sent a
+ * literal `@-` body and misdiagnosed the resulting 500 as a Bash
+ * permission denial (2026-04-18).
+ *
+ * When `options.maxBytes` is set, the body is rejected with a 413
+ * `body_too_large` response if the declared `Content-Length` or the
+ * actual decoded byte count exceeds the cap. Routes that accept large
+ * payloads (e.g. attachments, agent run-now) leave it unset to preserve
+ * the historical no-cap behavior; routes that write to disk pass an
+ * explicit cap to bound a runaway-payload denial-of-service.
+ */
+export declare function readJsonBody(c: Context, options?: {
+    maxBytes?: number;
+}): Promise<{
+    ok: true;
+    body: unknown;
+} | {
+    ok: false;
+    response: Response;
+}>;
+//# sourceMappingURL=json-body.d.ts.map

package/dist/api/json-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-body.d.ts","sourceRoot":"","sources":["../../src/api/json-body.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAKpC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,YAAY,CAChC,CAAC,EAAE,OAAO,EACV,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,CAwF1E"}

package/dist/api/json-body.js

@@ -0,0 +1,87 @@
+import { createLogger } from "../logging.js";
+const logger = createLogger("api-json-body");
+/**
+ * Read a JSON body off a Hono request. On parse failure, return a 400
+ * `invalid_json_body` response carrying the parser's error message and
+ * log one warning line.
+ *
+ * Surfacing the parse error (rather than letting Hono's default 500
+ * handler swallow it) is how agents learn their body shape is wrong
+ * and self-correct. Regression origin: a setup.initial session sent a
+ * literal `@-` body and misdiagnosed the resulting 500 as a Bash
+ * permission denial (2026-04-18).
+ *
+ * When `options.maxBytes` is set, the body is rejected with a 413
+ * `body_too_large` response if the declared `Content-Length` or the
+ * actual decoded byte count exceeds the cap. Routes that accept large
+ * payloads (e.g. attachments, agent run-now) leave it unset to preserve
+ * the historical no-cap behavior; routes that write to disk pass an
+ * explicit cap to bound a runaway-payload denial-of-service.
+ */
+export async function readJsonBody(c, options) {
+    const maxBytes = options?.maxBytes;
+    if (maxBytes !== undefined) {
+        const declared = c.req.header("content-length");
+        if (declared !== undefined) {
+            const declaredN = Number.parseInt(declared, 10);
+            if (Number.isFinite(declaredN) && declaredN > maxBytes) {
+                logger.warn({
+                    path: c.req.path,
+                    method: c.req.method,
+                    contentLength: declaredN,
+                    maxBytes,
+                }, "Request rejected — Content-Length exceeds size limit");
+                return {
+                    ok: false,
+                    response: c.json({ error: "body_too_large", maxBytes, actualBytes: declaredN }, 413),
+                };
+            }
+        }
+        let raw;
+        try {
+            raw = await c.req.text();
+        }
+        catch (err) {
+            const detail = err instanceof Error ? err.message : String(err);
+            logger.warn({ path: c.req.path, method: c.req.method, detail }, "Request rejected — body could not be read");
+            return {
+                ok: false,
+                response: c.json({ error: "invalid_json_body", message: detail }, 400),
+            };
+        }
+        // Defense-in-depth: a missing or lying Content-Length still gets
+        // caught by the post-read byte count. Buffer.byteLength reports the
+        // UTF-8 byte length so multi-byte content is measured correctly.
+        const actualBytes = Buffer.byteLength(raw, "utf-8");
+        if (actualBytes > maxBytes) {
+            logger.warn({ path: c.req.path, method: c.req.method, actualBytes, maxBytes }, "Request rejected — body exceeds size limit");
+            return {
+                ok: false,
+                response: c.json({ error: "body_too_large", maxBytes, actualBytes }, 413),
+            };
+        }
+        try {
+            return { ok: true, body: JSON.parse(raw) };
+        }
+        catch (err) {
+            const detail = err instanceof Error ? err.message : String(err);
+            logger.warn({ path: c.req.path, method: c.req.method, detail }, "Request rejected — body is not valid JSON");
+            return {
+                ok: false,
+                response: c.json({ error: "invalid_json_body", message: detail }, 400),
+            };
+        }
+    }
+    try {
+        return { ok: true, body: await c.req.json() };
+    }
+    catch (err) {
+        const detail = err instanceof Error ? err.message : String(err);
+        logger.warn({ path: c.req.path, method: c.req.method, detail }, "Request rejected — body is not valid JSON");
+        return {
+            ok: false,
+            response: c.json({ error: "invalid_json_body", message: detail }, 400),
+        };
+    }
+}
+//# sourceMappingURL=json-body.js.map

package/dist/api/json-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-body.js","sourceRoot":"","sources":["../../src/api/json-body.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;AAE7C;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,CAAU,EACV,OAA+B;IAE/B,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IAEnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CACT;oBACE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;oBAChB,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;oBACpB,aAAa,EAAE,SAAS;oBACxB,QAAQ;iBACT,EACD,sDAAsD,CACvD,CAAC;gBACF,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,EAC7D,GAAG,CACJ;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAClD,2CAA2C,CAC5C,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC;aACvE,CAAC;QACJ,CAAC;QAED,iEAAiE;QACjE,oEAAoE;QACpE,iEAAiE;QACjE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,WAAW,GAAG,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,EACjE,4CAA4C,CAC7C,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,CAAC,CAAC,IAAI,CACd,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,EAClD,GAAG,CACJ;aACF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAClD,2CAA2C,CAC5C,CAAC;YACF,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC;aACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CACT,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAClD,2CAA2C,CAC5C,CAAC;QACF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC;SACvE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/api/routes/activity-sources.d.ts

@@ -0,0 +1,20 @@
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+/**
+ * `GET /api/activity-sources` — the source-list the dashboard's
+ * Memory → Activity tab consumes (followups doc Issue 3).
+ *
+ * The runner's `enumerateActivitySources` is the canonical source of
+ * truth; this route is the dashboard's read-mirror. The response
+ * includes `status` so the UI can flag a recently-stopped task whose
+ * `_activity/<source>.md` is still on disk for the 90-day window.
+ *
+ * Settings → Management still uses `GET /managed-tasks` (active only)
+ * because that page edits live rows; the activity tab is read-only and
+ * benefits from the wider window.
+ */
+export interface ActivitySourcesRoutesDeps {
+    db: Database.Database;
+}
+export declare function createActivitySourcesRoutes(deps: ActivitySourcesRoutesDeps): Hono;
+//# sourceMappingURL=activity-sources.d.ts.map

package/dist/api/routes/activity-sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-sources.d.ts","sourceRoot":"","sources":["../../../src/api/routes/activity-sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAO3C;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;CACvB;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,yBAAyB,GAC9B,IAAI,CAeN"}

package/dist/api/routes/activity-sources.js

@@ -0,0 +1,18 @@
+import { Hono } from "hono";
+import { ACTIVITY_VIEW_WINDOW_DAYS, windowCutoffDate, } from "../../core/context/activity-view-reconciler.js";
+import { enumerateActivitySources } from "../../core/context/activity-sources.js";
+export function createActivitySourcesRoutes(deps) {
+    const app = new Hono();
+    const { db } = deps;
+    app.get("/activity-sources", (c) => {
+        const cutoff = windowCutoffDate(new Date(), ACTIVITY_VIEW_WINDOW_DAYS);
+        const items = enumerateActivitySources(db, cutoff);
+        return c.json({
+            items,
+            windowDays: ACTIVITY_VIEW_WINDOW_DAYS,
+            cutoffDate: cutoff,
+        });
+    });
+    return app;
+}
+//# sourceMappingURL=activity-sources.js.map

package/dist/api/routes/activity-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-sources.js","sourceRoot":"","sources":["../../../src/api/routes/activity-sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAoBlF,MAAM,UAAU,2BAA2B,CACzC,IAA+B;IAE/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAEpB,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,wBAAwB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK;YACL,UAAU,EAAE,yBAAyB;YACrC,UAAU,EAAE,MAAM;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/agent.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from "hono";
+import type { ApiDependencies } from "../server.js";
+export declare function createAgentRoutes(deps: ApiDependencies): Hono;
+//# sourceMappingURL=agent.d.ts.map

package/dist/api/routes/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/api/routes/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAmB5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AA6IpD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAuqB7D"}