@aitne/daemon 0.1.0

package/dist/api/routes/apple-calendar.d.ts

@@ -0,0 +1,31 @@
+import { Hono } from "hono";
+import type { ServiceRegistry } from "../../services/service-registry.js";
+import type { SecretBroker } from "../../secrets/secret-broker.js";
+import type { AgentWriteTracker } from "../../safety/agent-write-tracker.js";
+export interface AppleCalendarRouteDependencies {
+    services: ServiceRegistry;
+    secretBroker: SecretBroker;
+    agentWriteTracker?: AgentWriteTracker;
+}
+/**
+ * Apple Calendar (iCloud CalDAV) routes — provider sibling of `/api/calendar/*`.
+ *
+ * GET    /apple-calendar/status              — connection probe (200 always)
+ * GET    /apple-calendar/events              — list events (date, days)
+ * GET    /apple-calendar/events/:id          — get event detail
+ * POST   /apple-calendar/events              — create
+ * PATCH  /apple-calendar/events/:id          — update (master events only)
+ * DELETE /apple-calendar/events/:id          — delete (master events only)
+ * GET    /apple-calendar/calendars           — list calendars
+ * POST   /apple-calendar/freebusy            — derived busy intervals
+ * POST   /apple-calendar/credentials         — save Apple ID + app password
+ * DELETE /apple-calendar/credentials         — disconnect
+ * POST   /apple-calendar/default-calendar    — pick which calendar is primary
+ *
+ * The skill body routes the agent here when `rules/management.md` Source
+ * of Truth declares Apple Calendar as the schedule provider. The agent
+ * MUST NOT cross-call `/api/calendar/*`; that would query Google and
+ * silently return wrong data, which is worse than an error.
+ */
+export declare function createAppleCalendarRoutes(deps: AppleCalendarRouteDependencies): Hono;
+//# sourceMappingURL=apple-calendar.d.ts.map

package/dist/api/routes/apple-calendar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-calendar.d.ts","sourceRoot":"","sources":["../../../src/api/routes/apple-calendar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAG5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AAM1E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAyD7E,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,YAAY,CAAC;IAC3B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,8BAA8B,GACnC,IAAI,CA4PN"}

package/dist/api/routes/apple-calendar.js

@@ -0,0 +1,310 @@
+import { Hono } from "hono";
+import { z } from "zod";
+import { localDateStr } from "@aitne/shared";
+import { AppleCalendarService, EventNotFoundError, RecurringInstanceUnsupportedError, } from "../../services/apple-calendar/index.js";
+import { createLogger, toSafeErrorMessage } from "../../logging.js";
+import { readJsonBody } from "../json-body.js";
+const logger = createLogger("apple-calendar-api");
+/** Mirrors the Google Calendar attribution TTL — long enough that the
+ *  next observation pass sees the agent's write as agent-owned. Apple
+ *  Calendar has no poller in the MVP, so this is forward-compat. */
+const APPLE_CALENDAR_WRITE_TTL_MS = 15 * 60_000;
+const credentialsSchema = z
+    .object({
+    email: z.string().email(),
+    appPassword: z.string().min(8),
+})
+    .strict();
+const setDefaultCalendarSchema = z
+    .object({
+    calendarUrl: z.string().url(),
+})
+    .strict();
+/**
+ * Apple-specific event schemas. We deliberately do NOT reuse the Google
+ * `calendarCreateEventSchema` / `calendarUpdateEventSchema` here: those
+ * accept `attendees`, `reminders`, `recurrence`, and `visibility`, which
+ * iCloud either ignores silently or fails on, and routing them through
+ * a tolerant schema gave the agent the false impression that an
+ * invitation had been sent. With `.strict()`, an attempt to author
+ * those fields surfaces a 400 `validation_error` so the agent can stop
+ * and tell the user instead of pretending success.
+ */
+const appleCreateEventSchema = z
+    .object({
+    summary: z.string().min(1).max(1000),
+    start: z.string().min(1),
+    end: z.string().min(1),
+    description: z.string().max(10_000).optional(),
+    location: z.string().max(1000).optional(),
+})
+    .strict();
+const appleUpdateEventSchema = z
+    .object({
+    summary: z.string().min(1).max(1000).optional(),
+    start: z.string().min(1).optional(),
+    end: z.string().min(1).optional(),
+    description: z.string().max(10_000).optional(),
+    location: z.string().max(1000).optional(),
+})
+    .strict()
+    .refine((data) => Object.values(data).some((v) => v !== undefined), {
+    message: "At least one field must be provided for update",
+});
+/**
+ * Apple Calendar (iCloud CalDAV) routes — provider sibling of `/api/calendar/*`.
+ *
+ * GET    /apple-calendar/status              — connection probe (200 always)
+ * GET    /apple-calendar/events              — list events (date, days)
+ * GET    /apple-calendar/events/:id          — get event detail
+ * POST   /apple-calendar/events              — create
+ * PATCH  /apple-calendar/events/:id          — update (master events only)
+ * DELETE /apple-calendar/events/:id          — delete (master events only)
+ * GET    /apple-calendar/calendars           — list calendars
+ * POST   /apple-calendar/freebusy            — derived busy intervals
+ * POST   /apple-calendar/credentials         — save Apple ID + app password
+ * DELETE /apple-calendar/credentials         — disconnect
+ * POST   /apple-calendar/default-calendar    — pick which calendar is primary
+ *
+ * The skill body routes the agent here when `rules/management.md` Source
+ * of Truth declares Apple Calendar as the schedule provider. The agent
+ * MUST NOT cross-call `/api/calendar/*`; that would query Google and
+ * silently return wrong data, which is worse than an error.
+ */
+export function createAppleCalendarRoutes(deps) {
+    const app = new Hono();
+    const { services, secretBroker, agentWriteTracker } = deps;
+    // ── Status (always 200) ──
+    app.get("/apple-calendar/status", (c) => {
+        return c.json({
+            configured: !!services.appleCalendar,
+            available: !!services.appleCalendar?.available,
+        });
+    });
+    // ── Credentials management ──
+    app.post("/apple-calendar/credentials", async (c) => {
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const parsed = credentialsSchema.safeParse(parsedBody.body);
+        if (!parsed.success) {
+            return c.json({ error: "validation_error", details: parsed.error.issues }, 400);
+        }
+        try {
+            // Validate + persist + populate the registry slot in one shot via
+            // the service's `connect()`. We deliberately skip the secret-change
+            // hot-reload notification here: the reload helper would null the
+            // slot and rebuild the service from keychain, redoing the iCloud
+            // round-trip we just completed and momentarily exposing a
+            // `services.appleCalendar === null` window to concurrent requests.
+            // The hot-reload path is reserved for boot + dashboard secret
+            // editor; direct connect bypasses it cleanly.
+            const target = services.appleCalendar ?? new AppleCalendarService(secretBroker);
+            await target.connect(parsed.data.email, parsed.data.appPassword);
+            services.appleCalendar = target;
+            delete services.errors.appleCalendar;
+            const calendars = target.listCalendars();
+            return c.json({
+                status: "connected",
+                email: parsed.data.email,
+                calendars,
+            });
+        }
+        catch (err) {
+            logger.error({ err }, "Apple Calendar connect failed");
+            return c.json({ error: "auth_failed", message: toSafeErrorMessage(err) }, 401);
+        }
+    });
+    app.delete("/apple-calendar/credentials", async (c) => {
+        if (services.appleCalendar) {
+            await services.appleCalendar.disconnect();
+            services.appleCalendar = null;
+        }
+        else {
+            // No live service — clear keychain ourselves so the wipe is
+            // idempotent even when the daemon never finished init().
+            await secretBroker.deleteAppleCalendarCredentials();
+        }
+        delete services.errors.appleCalendar;
+        return c.json({ status: "disconnected" });
+    });
+    app.post("/apple-calendar/default-calendar", async (c) => {
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const parsed = setDefaultCalendarSchema.safeParse(parsedBody.body);
+        if (!parsed.success) {
+            return c.json({ error: "validation_error", details: parsed.error.issues }, 400);
+        }
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        try {
+            await services.appleCalendar.setDefaultCalendar(parsed.data.calendarUrl);
+            return c.json({ status: "ok", calendars: services.appleCalendar.listCalendars() });
+        }
+        catch (err) {
+            return c.json({ error: "validation_error", message: toSafeErrorMessage(err) }, 400);
+        }
+    });
+    // ── Read-only routes ──
+    app.get("/apple-calendar/calendars", (c) => {
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        return c.json({ calendars: services.appleCalendar.listCalendars() });
+    });
+    app.post("/apple-calendar/freebusy", async (c) => {
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const parsed = z
+            .object({ timeMin: z.string().min(1), timeMax: z.string().min(1) })
+            .safeParse(parsedBody.body);
+        if (!parsed.success) {
+            return c.json({ error: "validation_error", details: parsed.error.issues }, 400);
+        }
+        try {
+            const result = await services.appleCalendar.queryFreeBusy(parsed.data.timeMin, parsed.data.timeMax);
+            return c.json(result);
+        }
+        catch (err) {
+            logger.error({ err }, "Apple Calendar freebusy failed");
+            return c.json({ error: "apple_calendar_error", message: toSafeErrorMessage(err) }, 502);
+        }
+    });
+    // ── Events ──
+    app.get("/apple-calendar/events", async (c) => {
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        let date = c.req.query("date") ?? localDateStr(new Date());
+        if (date === "today")
+            date = localDateStr(new Date());
+        const days = Math.min(Number(c.req.query("days") ?? "1"), 90);
+        const startMs = new Date(`${date}T00:00:00Z`).getTime();
+        if (Number.isNaN(startMs)) {
+            return c.json({ error: "invalid date format — expected YYYY-MM-DD or 'today'" }, 400);
+        }
+        const timeMin = new Date(startMs).toISOString();
+        const timeMax = new Date(startMs + days * 24 * 60 * 60 * 1000).toISOString();
+        try {
+            const events = await services.appleCalendar.listEvents(timeMin, timeMax);
+            return c.json({ events });
+        }
+        catch (err) {
+            logger.error({ err }, "Apple Calendar list failed");
+            return c.json({ error: "apple_calendar_error", message: toSafeErrorMessage(err) }, 502);
+        }
+    });
+    app.post("/apple-calendar/events", async (c) => {
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        const parsed = appleCreateEventSchema.safeParse(parsedBody.body);
+        if (!parsed.success) {
+            return c.json({ error: "validation_error", details: parsed.error.issues }, 400);
+        }
+        try {
+            const result = await services.appleCalendar.createEvent({
+                summary: parsed.data.summary,
+                start: parsed.data.start,
+                end: parsed.data.end,
+                description: parsed.data.description,
+                location: parsed.data.location,
+            });
+            agentWriteTracker?.markWriting(`apple-calendar:${result.eventId}`, null, {
+                ttlMs: APPLE_CALENDAR_WRITE_TTL_MS,
+            });
+            return c.json({ status: "created", eventId: result.eventId });
+        }
+        catch (err) {
+            logger.error({ err }, "Apple Calendar create failed");
+            return c.json({ error: "apple_calendar_error", message: toSafeErrorMessage(err) }, 502);
+        }
+    });
+    app.get("/apple-calendar/events/:id", async (c) => {
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        const eventId = c.req.param("id");
+        try {
+            const event = await services.appleCalendar.getEvent(eventId);
+            return c.json({ event });
+        }
+        catch (err) {
+            if (err instanceof EventNotFoundError) {
+                return c.json({ error: "not_found" }, 404);
+            }
+            logger.error({ err }, "Apple Calendar get failed");
+            return c.json({ error: "apple_calendar_error", message: toSafeErrorMessage(err) }, 502);
+        }
+    });
+    app.patch("/apple-calendar/events/:id", async (c) => {
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        const parsed = appleUpdateEventSchema.safeParse(parsedBody.body);
+        if (!parsed.success) {
+            return c.json({ error: "validation_error", details: parsed.error.issues }, 400);
+        }
+        const eventId = c.req.param("id");
+        agentWriteTracker?.markWriting(`apple-calendar:${eventId}`, null, {
+            ttlMs: APPLE_CALENDAR_WRITE_TTL_MS,
+        });
+        try {
+            const result = await services.appleCalendar.updateEvent(eventId, {
+                summary: parsed.data.summary,
+                start: parsed.data.start,
+                end: parsed.data.end,
+                description: parsed.data.description,
+                location: parsed.data.location,
+            });
+            return c.json({ status: "updated", eventId: result.eventId });
+        }
+        catch (err) {
+            if (err instanceof EventNotFoundError) {
+                return c.json({ error: "not_found" }, 404);
+            }
+            if (err instanceof RecurringInstanceUnsupportedError) {
+                return c.json({ error: "recurring_instance_unsupported", message: err.message }, 501);
+            }
+            logger.error({ err }, "Apple Calendar update failed");
+            return c.json({ error: "apple_calendar_error", message: toSafeErrorMessage(err) }, 502);
+        }
+    });
+    app.delete("/apple-calendar/events/:id", async (c) => {
+        if (!services.appleCalendar?.available) {
+            return c.json({ error: "apple_calendar_not_configured" }, 503);
+        }
+        const eventId = c.req.param("id");
+        agentWriteTracker?.markWriting(`apple-calendar:${eventId}`, null, {
+            ttlMs: APPLE_CALENDAR_WRITE_TTL_MS,
+        });
+        try {
+            await services.appleCalendar.deleteEvent(eventId);
+            return c.json({ status: "deleted", eventId });
+        }
+        catch (err) {
+            if (err instanceof EventNotFoundError) {
+                return c.json({ error: "not_found" }, 404);
+            }
+            if (err instanceof RecurringInstanceUnsupportedError) {
+                return c.json({ error: "recurring_instance_unsupported", message: err.message }, 501);
+            }
+            logger.error({ err }, "Apple Calendar delete failed");
+            return c.json({ error: "apple_calendar_error", message: toSafeErrorMessage(err) }, 502);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=apple-calendar.js.map

package/dist/api/routes/apple-calendar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-calendar.js","sourceRoot":"","sources":["../../../src/api/routes/apple-calendar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,iCAAiC,GAClC,MAAM,wCAAwC,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,MAAM,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;AAElD;;oEAEoE;AACpE,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAC;AAEhD,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC9B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;GASG;AACH,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE;IAClE,OAAO,EAAE,gDAAgD;CAC1D,CAAC,CAAC;AAQL;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,IAAoC;IAEpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,IAAI,CAAC;IAE3D,4BAA4B;IAE5B,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa;YACpC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS;SAC/C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+BAA+B;IAE/B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,oEAAoE;YACpE,iEAAiE;YACjE,iEAAiE;YACjE,0DAA0D;YAC1D,mEAAmE;YACnE,8DAA8D;YAC9D,8CAA8C;YAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,IAAI,IAAI,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAChF,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjE,QAAQ,CAAC,aAAa,GAAG,MAAM,CAAC;YAChC,OAAO,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;YAErC,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpD,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC3B,MAAM,QAAQ,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;YAC1C,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,yDAAyD;YACzD,MAAM,YAAY,CAAC,8BAA8B,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;QACrC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAC/D,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,yBAAyB;IAEzB,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,CAAC,EAAE,EAAE;QACzC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,MAAM,MAAM,GAAG,CAAC;aACb,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;aAClE,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,aAAa,CACvD,MAAM,CAAC,IAAI,CAAC,OAAO,EACnB,MAAM,CAAC,IAAI,CAAC,OAAO,CACpB,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gCAAgC,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,eAAe;IAEf,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,IAAI,KAAK,OAAO;YAAE,IAAI,GAAG,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,sDAAsD,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAE7E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC;gBACtD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,iBAAiB,EAAE,WAAW,CAAC,kBAAkB,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE;gBACvE,KAAK,EAAE,2BAA2B;aACnC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,2BAA2B,CAAC,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,iBAAiB,EAAE,WAAW,CAAC,kBAAkB,OAAO,EAAE,EAAE,IAAI,EAAE;YAChE,KAAK,EAAE,2BAA2B;SACnC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE;gBAC/D,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;gBACpB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;gBACpC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ;aAC/B,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,GAAG,YAAY,iCAAiC,EAAE,CAAC;gBACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,4BAA4B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,EAAE,CAAC;YACvC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,iBAAiB,EAAE,WAAW,CAAC,kBAAkB,OAAO,EAAE,EAAE,IAAI,EAAE;YAChE,KAAK,EAAE,2BAA2B;SACnC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,GAAG,YAAY,iCAAiC,EAAE,CAAC;gBACrD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/api/routes/attachments.d.ts

@@ -0,0 +1,36 @@
+import { Hono } from "hono";
+import type Database from "better-sqlite3";
+import type { AgentConfig } from "../../config.js";
+import { AttachmentStore } from "../../services/attachments/store.js";
+import type { IAuditLogger } from "../../core/dispatcher.js";
+export interface AttachmentRoutesDeps {
+    db: Database.Database;
+    config: AgentConfig;
+    store: AttachmentStore;
+    /**
+     * Validate an `X-Turn-Token` header. Returns the `session_id` bound to
+     * that token when the dispatcher issued it for a currently-running
+     * turn, null otherwise. Injected by index.ts to avoid a runtime
+     * dependency on the dispatcher module inside the route file.
+     */
+    validateTurnToken: (token: string) => {
+        sessionId: number;
+    } | null;
+    /**
+     * Audit logger — every successful inbound/outbound upload is written to
+     * `agent_actions` so the dashboard events/cost views surface attachment
+     * activity (rows feed the on-demand retrospective per DELEGATED-MODE-V2
+     * §4.5). Optional during tests that don't wire the dispatcher.
+     */
+    audit?: IAuditLogger;
+}
+export declare function createAttachmentRoutes(deps: AttachmentRoutesDeps): Hono;
+export declare const ATTACHMENT_LIMITS: {
+    readonly IMAGE_MAX_BYTES: number;
+    readonly NON_IMAGE_MAX_BYTES: number;
+    readonly PER_TURN_MAX_BYTES: number;
+    readonly CONCURRENT_UPLOADS_PER_KEY: 5;
+};
+/** Test-only: reset the in-flight counter. */
+export declare function resetInFlightCounter(): void;
+//# sourceMappingURL=attachments.d.ts.map

package/dist/api/routes/attachments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachments.d.ts","sourceRoot":"","sources":["../../../src/api/routes/attachments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EACL,eAAe,EAGhB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AA+B7D,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;IACvB;;;;;OAKG;IACH,iBAAiB,EAAE,CACjB,KAAK,EAAE,MAAM,KACV;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AA6FD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,GAAG,IAAI,CAyMvE;AAED,eAAO,MAAM,iBAAiB;;;;;CAKpB,CAAC;AAEX,8CAA8C;AAC9C,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}