@aitne/daemon 0.1.0

package/dist/api/routes/sot-bindings.js

@@ -0,0 +1,163 @@
+import { Hono } from "hono";
+import { sotBindingsSchema, } from "@aitne/shared";
+import { readSotBindings, writeSotBindings, } from "../../db/sot-bindings-store.js";
+import { listManagedTasks } from "../../db/managed-tasks-store.js";
+import { readJsonBody } from "../json-body.js";
+import { getContextDir } from "../../config.js";
+import { createLogger } from "../../logging.js";
+import { readAndParseManagementMd, renderAndWriteManagementMd, } from "../../core/management-registry.js";
+import { InMemoryManagementMdWriteLockManager, withManagementMdWriteLock, } from "../../core/management-md-write-lock.js";
+const logger = createLogger("sot-bindings-api");
+function recordAuditAction(db, detail) {
+    try {
+        db.prepare(`INSERT INTO agent_actions
+         (event_id, action_type, trigger, result, detail, started_at, completed_at)
+       VALUES (?, 'sot_binding.updated', 'reactive', 'success', ?, datetime('now'), datetime('now'))`).run(`sot:${Date.now()}`, JSON.stringify(detail));
+    }
+    catch (err) {
+        logger.warn({ err }, "sot_binding.updated audit insert failed");
+    }
+}
+/**
+ * Recover preserved §C and free-prose blocks from the on-disk file so
+ * the SoT-binding PUT does not strip user-authored content (parity with
+ * `bootstrapManagementRegistry` and the watcher). MUST be called inside
+ * the management-md write lock.
+ */
+async function loadPreservedRenderOptions(contextDir) {
+    try {
+        const parsed = await readAndParseManagementMd(contextDir);
+        if (!parsed)
+            return {};
+        const opts = {};
+        if (parsed.preservedSectionC !== null) {
+            opts.preservedSectionC = parsed.preservedSectionC;
+        }
+        if (parsed.preservedFreeProse.size > 0) {
+            opts.preservedFreeProse = parsed.preservedFreeProse;
+        }
+        return opts;
+        /* c8 ignore start — defensive: readAndParseManagementMd swallows ENOENT
+           internally and parseManagementMd surfaces validation issues via the
+           returned `errors[]` array rather than throwing. The catch only fires
+           on filesystem failures (EACCES/EIO mid-read) which are not reachable
+           in unit-test conditions. */
+    }
+    catch (err) {
+        logger.warn({ err }, "management.md preserved-section read failed — re-render will fall back to defaults");
+        return {};
+    }
+    /* c8 ignore stop */
+}
+async function renderManagementMdAfterSotChange(contextDir, db, lockManager, trigger) {
+    const result = await withManagementMdWriteLock(lockManager, async () => {
+        const lockId = lockManager.getHolder();
+        /* c8 ignore next 3 */
+        if (!lockId) {
+            throw new Error("renderManagementMdAfterSotChange: lock holder lost");
+        }
+        const render = await loadPreservedRenderOptions(contextDir);
+        await renderAndWriteManagementMd(contextDir, db, {
+            sotBindings: readSotBindings(db),
+            managedTasks: listManagedTasks(db),
+        }, { lockManager, lockId, trigger, render });
+    });
+    if (!result.ok) {
+        logger.warn({ holder: result.holder, trigger }, "management.md re-render skipped — lock contended");
+        return { ok: false, reason: `lock_contended:${result.holder}` };
+    }
+    return { ok: true };
+}
+export function createSotBindingsRoutes(deps) {
+    const app = new Hono();
+    const { db, config, lockManager } = deps;
+    // GET /sot-bindings — full list
+    app.get("/sot-bindings", (c) => {
+        const items = readSotBindings(db);
+        return c.json({ items });
+    });
+    // GET /sot-bindings/:category — single binding (404 when absent)
+    app.get("/sot-bindings/:category", (c) => {
+        const category = c.req.param("category").trim();
+        if (!category) {
+            return c.json({ error: "invalid_category" }, 400);
+        }
+        const items = readSotBindings(db);
+        const item = items.find((b) => b.category === category);
+        if (!item)
+            return c.json({ error: "not_found" }, 404);
+        return c.json({ item });
+    });
+    // PUT /sot-bindings — replace the entire list
+    app.put("/sot-bindings", async (c) => {
+        const parsedBody = await readJsonBody(c, { maxBytes: 32 * 1024 });
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const body = parsedBody.body;
+        // Accept both `{items: [...]}` and the bare array form so the
+        // dashboard's <PUT> and the agent's curl both round-trip cleanly.
+        const candidate = Array.isArray(body)
+            ? body
+            : body !== null &&
+                typeof body === "object" &&
+                Array.isArray(body.items)
+                ? body.items
+                : null;
+        if (candidate === null) {
+            return c.json({ error: "validation_error", message: "body must be an array or {items: [...]}" }, 400);
+        }
+        const parsed = sotBindingsSchema.safeParse(candidate);
+        if (!parsed.success) {
+            return c.json({ error: "validation_error", details: parsed.error }, 400);
+        }
+        // §13.3 — defense in depth: forbid duplicate categories. The Zod
+        // schema accepts duplicates by default; the file render is keyed on
+        // category position so two rows for the same key would silently
+        // overwrite each other in the user's mental model.
+        const seen = new Set();
+        for (const row of parsed.data) {
+            if (seen.has(row.category)) {
+                return c.json({
+                    error: "duplicate_category",
+                    category: row.category,
+                }, 400);
+            }
+            seen.add(row.category);
+        }
+        const previous = readSotBindings(db);
+        let next;
+        try {
+            next = writeSotBindings(db, parsed.data);
+        }
+        catch (err) {
+            logger.error({ err }, "sot-bindings PUT write failed");
+            return c.json({ error: "internal_error" }, 500);
+        }
+        recordAuditAction(db, { previous, next });
+        let contextDir;
+        try {
+            contextDir = getContextDir(config, db);
+        }
+        catch (err) {
+            logger.warn({ err }, "management.md re-render skipped (sot PUT)");
+            return c.json({ status: "updated", items: next });
+        }
+        const renderResult = await renderManagementMdAfterSotChange(contextDir, db, lockManager, "sot-bindings.api.put");
+        return c.json({
+            status: "updated",
+            items: next,
+            render_status: renderResult.ok ? "ok" : renderResult.reason,
+        });
+    });
+    return app;
+}
+export function buildSotBindingsRoutesDepsFromApi(deps, fallbackLockManager) {
+    return {
+        db: deps.db,
+        config: deps.config,
+        lockManager: deps.managementMdWriteLockManager ??
+            fallbackLockManager ??
+            new InMemoryManagementMdWriteLockManager(),
+    };
+}
+//# sourceMappingURL=sot-bindings.js.map

package/dist/api/routes/sot-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sot-bindings.js","sourceRoot":"","sources":["../../../src/api/routes/sot-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,iBAAiB,GAElB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,gBAAgB,GACjB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,0BAA0B,GAE3B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,oCAAoC,EACpC,yBAAyB,GAE1B,MAAM,wCAAwC,CAAC;AAGhD,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAiBhD,SAAS,iBAAiB,CACxB,EAAqB,EACrB,MAA+B;IAE/B,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CACR;;qGAE+F,CAChG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,yCAAyC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,0BAA0B,CACvC,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAkB,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;QACZ;;;;sCAI8B;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,EACP,oFAAoF,CACrF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,oBAAoB;AACtB,CAAC;AAED,KAAK,UAAU,gCAAgC,CAC7C,UAAkB,EAClB,EAAqB,EACrB,WAAyC,EACzC,OAAe;IAEf,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACvC,sBAAsB;QACtB,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,0BAA0B,CAC9B,UAAU,EACV,EAAE,EACF;YACE,WAAW,EAAE,eAAe,CAAC,EAAE,CAAC;YAChC,YAAY,EAAE,gBAAgB,CAAC,EAAE,CAAC;SACnC,EACD,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,EAClC,kDAAkD,CACnD,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAA2B;IACjE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAEzC,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;QACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,8DAA8D;QAC9D,kEAAkE;QAClE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACnC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,KAAK,IAAI;gBACX,OAAO,IAAI,KAAK,QAAQ;gBACxB,KAAK,CAAC,OAAO,CAAE,IAAgC,CAAC,KAAK,CAAC;gBACxD,CAAC,CAAE,IAAgC,CAAC,KAAK;gBACzC,CAAC,CAAC,IAAI,CAAC;QACX,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,yCAAyC,EAAE,EACjF,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;QACD,iEAAiE;QACjE,oEAAoE;QACpE,gEAAgE;QAChE,mDAAmD;QACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,oBAAoB;oBAC3B,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACvB,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,iBAAiB,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,2CAA2C,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,gCAAgC,CACzD,UAAU,EACV,EAAE,EACF,WAAW,EACX,sBAAsB,CACvB,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,IAAI;YACX,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM;SAC5D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,IAAqB,EACrB,mBAAkD;IAElD,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EACT,IAAI,CAAC,4BAA4B;YACjC,mBAAmB;YACnB,IAAI,oCAAoC,EAAE;KAC7C,CAAC;AACJ,CAAC"}

package/dist/api/routes/sse.d.ts

@@ -0,0 +1,86 @@
+import { Hono } from "hono";
+import type { BackendId } from "@aitne/shared";
+import type { DashboardAdapter } from "../../adapters/dashboard-adapter.js";
+import type { AttachmentStore } from "../../services/attachments/store.js";
+import type { SessionInfoPayload } from "../chat-binding-query.js";
+/**
+ * Broadcaster for real-time event streaming via SSE.
+ * Replaces the WebSocket-based event broadcast.
+ */
+export declare class EventBroadcaster {
+    private readonly clients;
+    /**
+     * Broadcast a persisted `agent_actions` row to dashboard subscribers.
+     *
+     * The dashboard merges these rows with `/api/events` pagination, so the
+     * payload must stay aligned with that REST shape rather than raw EventBus data.
+     */
+    broadcastEvent(data: unknown): void;
+    /**
+     * Broadcast a named SSE event to dashboard subscribers.
+     *
+     * Used by Management Mode to stream migration progress separately from
+     * the persisted `agent_actions` event feed.
+     */
+    broadcastNamedEvent(event: string, data: unknown): Promise<void>;
+    register(client: SSEWriter): void;
+    unregister(client: SSEWriter): void;
+    get clientCount(): number;
+}
+interface SSEWriter {
+    write(event: string, data: string): Promise<void>;
+}
+/**
+ * Create SSE routes for real-time communication.
+ *
+ * Endpoints:
+ * - GET  /chat/stream    — SSE: server→client push for chat responses
+ * - POST /chat/messages   — HTTP: client→server chat message
+ * - GET  /events/stream   — SSE: server→client event broadcast
+ * - GET  /logs/stream     — SSE: server→client real-time application logs
+ * - GET  /logs            — REST: recent buffered application logs
+ */
+export declare function createSSERoutes(deps: {
+    dashboardAdapter: DashboardAdapter | null;
+    eventBroadcaster: EventBroadcaster;
+    /** Optional callback to resolve the current chat binding at SSE connect time */
+    getChatBinding?: () => SessionInfoPayload | null;
+    /** Check whether a session row exists and is active (SELECT-only). */
+    isSessionActive?: (sessionId: number) => boolean;
+    /**
+     * Fallback lookup when the client did NOT pass a stored sessionId (e.g.
+     * the browser navigated away before the dispatcher's first session_info
+     * push could save to localStorage). Returns the currently-active
+     * dashboard_chat session id, or null. Lets the new tab rebind to an
+     * in-flight session instead of starting fresh.
+     */
+    findActiveDashboardSessionId?: () => number | null;
+    /** Update the session's channel_id in the DB after registration. */
+    rebindSessionChannel?: (sessionId: number, newChannelId: string) => void;
+    /** Explicitly close the current dashboard chat session. */
+    endSession?: (channelId: string) => Promise<{
+        id: number;
+    } | null> | {
+        id: number;
+    } | null;
+    /** Continue a resumable browser-only dashboard session from history. */
+    continueSession?: (sessionId: number) => Promise<{
+        ok: true;
+        sessionId: number;
+    } | {
+        ok: false;
+        status: 403 | 404 | 409 | 503;
+        message: string;
+    }>;
+    /** Validate a client-supplied (backendId, modelId) override pair against
+     *  the DB (backend enabled + model in registry for that backend). Returns
+     *  true when the pair is safe to forward to the dashboard adapter. */
+    validateChatModelOverride?: (backendId: BackendId, modelId: string) => boolean;
+    /** Shared AttachmentStore — used by POST /chat/messages to validate
+     *  attachmentIds before they are handed to the dispatcher. The store
+     *  binds rows to (session_id, message_id) once the dispatcher records
+     *  the user message. */
+    attachmentStore?: AttachmentStore;
+}): Hono;
+export {};
+//# sourceMappingURL=sse.d.ts.map

package/dist/api/routes/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/api/routes/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAI/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAMnE;;;GAGG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwB;IAEhD;;;;;OAKG;IACH,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAInC;;;;;OAKG;IACG,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAatE,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAKjC,UAAU,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAKnC,IAAI,WAAW,IAAI,MAAM,CAExB;CACF;AAED,UAAU,SAAS;IACjB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC1C,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,kBAAkB,GAAG,IAAI,CAAC;IACjD,sEAAsE;IACtE,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD;;;;;;OAMG;IACH,4BAA4B,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACnD,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,IAAI,CAAC;IACzE,2DAA2D;IAC3D,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3F,wEAAwE;IACxE,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAC5C;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAC/B;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAChE,CAAC;IACF;;0EAEsE;IACtE,yBAAyB,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC/E;;;4BAGwB;IACxB,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,GAAG,IAAI,CAsYP"}

package/dist/api/routes/sse.js

@@ -0,0 +1,378 @@
+import { Hono } from "hono";
+import { streamSSE } from "hono/streaming";
+import { isBackendId } from "@aitne/shared";
+import { createLogger } from "../../logging.js";
+import { getLogBuffer } from "../../log-buffer.js";
+import { ATTACHMENT_LIMITS } from "./attachments.js";
+import { resolveDashboardResumeSession } from "../chat-session-resume.js";
+import { readJsonBody } from "../json-body.js";
+const logger = createLogger("sse");
+/**
+ * Broadcaster for real-time event streaming via SSE.
+ * Replaces the WebSocket-based event broadcast.
+ */
+export class EventBroadcaster {
+    clients = new Set();
+    /**
+     * Broadcast a persisted `agent_actions` row to dashboard subscribers.
+     *
+     * The dashboard merges these rows with `/api/events` pagination, so the
+     * payload must stay aligned with that REST shape rather than raw EventBus data.
+     */
+    broadcastEvent(data) {
+        void this.broadcastNamedEvent("event", data);
+    }
+    /**
+     * Broadcast a named SSE event to dashboard subscribers.
+     *
+     * Used by Management Mode to stream migration progress separately from
+     * the persisted `agent_actions` event feed.
+     */
+    async broadcastNamedEvent(event, data) {
+        const json = JSON.stringify(data);
+        await Promise.all([...this.clients].map(async (client) => {
+            try {
+                await client.write(event, json);
+            }
+            catch {
+                this.clients.delete(client);
+            }
+        }));
+    }
+    register(client) {
+        this.clients.add(client);
+        logger.info({ total: this.clients.size }, "Event SSE client connected");
+    }
+    unregister(client) {
+        this.clients.delete(client);
+        logger.info({ total: this.clients.size }, "Event SSE client disconnected");
+    }
+    get clientCount() {
+        return this.clients.size;
+    }
+}
+/**
+ * Create SSE routes for real-time communication.
+ *
+ * Endpoints:
+ * - GET  /chat/stream    — SSE: server→client push for chat responses
+ * - POST /chat/messages   — HTTP: client→server chat message
+ * - GET  /events/stream   — SSE: server→client event broadcast
+ * - GET  /logs/stream     — SSE: server→client real-time application logs
+ * - GET  /logs            — REST: recent buffered application logs
+ */
+export function createSSERoutes(deps) {
+    const app = new Hono();
+    const { dashboardAdapter, eventBroadcaster } = deps;
+    // ── Chat SSE stream ──
+    app.get("/chat/stream", (c) => {
+        if (!dashboardAdapter) {
+            return c.json({ error: "dashboard adapter not available" }, 503);
+        }
+        const adapter = dashboardAdapter;
+        // Read optional sessionId from query — the frontend sends this when
+        // restoring a session after page reload or SSE reconnect.
+        const rawSessionId = c.req.query("sessionId");
+        const resumeSessionId = rawSessionId ? Number(rawSessionId) : undefined;
+        const validResumeId = resumeSessionId && Number.isFinite(resumeSessionId) && resumeSessionId > 0
+            ? resumeSessionId
+            : undefined;
+        return streamSSE(c, async (stream) => {
+            const client = {
+                async writeSSE(event, data) {
+                    await stream.writeSSE({ event, data });
+                },
+                get closed() {
+                    return stream.closed || stream.aborted;
+                },
+            };
+            // Resolve current binding so the first session_info event includes model info
+            const initialInfo = deps.getChatBinding?.() ?? undefined;
+            // Check session validity BEFORE registration so the initial session_info
+            // event carries the correct flag (sessionId present → valid, absent → stale).
+            const requestedSessionIsActive = validResumeId && deps.isSessionActive
+                ? deps.isSessionActive(validResumeId)
+                : undefined;
+            if (validResumeId && requestedSessionIsActive === false) {
+                logger.debug({ sessionId: validResumeId }, "Session resume skipped — not found or inactive");
+            }
+            const discoveredActiveSessionId = deps.findActiveDashboardSessionId?.() ?? null;
+            const resolvedResume = resolveDashboardResumeSession({
+                requestedSessionId: validResumeId,
+                requestedSessionIsActive,
+                activeDashboardSessionId: discoveredActiveSessionId,
+            });
+            if (resolvedResume.source === "active" && discoveredActiveSessionId) {
+                logger.debug({ sessionId: discoveredActiveSessionId }, validResumeId
+                    ? "Auto-adopted active dashboard session after stale resume id"
+                    : "Auto-adopted active dashboard session on fresh SSE connect");
+            }
+            const channelId = adapter.registerClient(client, {
+                initialInfo,
+                resumeSessionId: resolvedResume.sessionId,
+                resumeSessionValid: resolvedResume.valid,
+            });
+            // Rebind the session's channel_id AFTER registration so the UUID is final.
+            if (resolvedResume.sessionId && resolvedResume.valid && deps.rebindSessionChannel) {
+                deps.rebindSessionChannel(resolvedResume.sessionId, channelId);
+            }
+            stream.onAbort(() => {
+                adapter.unregisterClient(channelId);
+            });
+            // Keep alive with periodic pings until client disconnects
+            while (!stream.aborted) {
+                await stream.sleep(30_000);
+                if (!stream.aborted) {
+                    await stream.writeSSE({ event: "ping", data: "" }).catch(() => { });
+                }
+            }
+        });
+    });
+    // ── Chat message POST ──
+    app.post("/chat/end-session", async (c) => {
+        if (!dashboardAdapter) {
+            return c.json({ error: "dashboard adapter not available" }, 503);
+        }
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const body = parsedBody.body;
+        if (!body.channelId || typeof body.channelId !== "string") {
+            return c.json({ error: "channelId is required" }, 400);
+        }
+        const closed = await deps.endSession?.(body.channelId) ?? null;
+        return c.json({
+            status: "ended",
+            closedSessionId: closed?.id ?? null,
+        });
+    });
+    app.post("/chat/continue-session", async (c) => {
+        if (!dashboardAdapter) {
+            return c.json({ error: "dashboard adapter not available" }, 503);
+        }
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const body = parsedBody.body;
+        if (typeof body.sessionId !== "number" || !Number.isFinite(body.sessionId) || body.sessionId <= 0) {
+            return c.json({ error: "sessionId is required" }, 400);
+        }
+        const result = await deps.continueSession?.(body.sessionId) ?? {
+            ok: false,
+            status: 503,
+            message: "continue unavailable",
+        };
+        if (!result.ok) {
+            return c.json({ error: "continue_failed", message: result.message }, result.status);
+        }
+        return c.json({
+            status: "continued",
+            sessionId: result.sessionId,
+        });
+    });
+    // ── Chat message POST ──
+    app.post("/chat/messages", async (c) => {
+        if (!dashboardAdapter) {
+            return c.json({ error: "dashboard adapter not available" }, 503);
+        }
+        const parsedBody = await readJsonBody(c);
+        if (!parsedBody.ok)
+            return parsedBody.response;
+        const body = parsedBody.body;
+        if (!body.channelId || typeof body.content !== "string") {
+            return c.json({ error: "channelId and content are required" }, 400);
+        }
+        if (body.content.length > 100_000) {
+            return c.json({ error: "invalid content" }, 400);
+        }
+        // ── Validate optional attachmentIds ──
+        let attachmentIds = [];
+        if (body.attachmentIds !== undefined) {
+            if (!Array.isArray(body.attachmentIds) || body.attachmentIds.some((v) => typeof v !== "string")) {
+                return c.json({ error: "invalid_attachmentIds", message: "attachmentIds must be string[]" }, 400);
+            }
+            attachmentIds = body.attachmentIds.slice(0, 50);
+            if (!deps.attachmentStore) {
+                return c.json({ error: "attachments_disabled" }, 503);
+            }
+            // Verify every id resolves to an unbound inbound row and the
+            // total size for this turn is under the per-turn cap.
+            let totalBytes = 0;
+            for (const id of attachmentIds) {
+                const row = deps.attachmentStore.get(id);
+                if (!row || row.direction !== "inbound" || row.messageId !== null) {
+                    return c.json({ error: "invalid_attachment", message: `Unknown or already-bound attachment ${id}` }, 400);
+                }
+                totalBytes += row.sizeBytes;
+            }
+            if (totalBytes > ATTACHMENT_LIMITS.PER_TURN_MAX_BYTES) {
+                return c.json({
+                    error: "per_turn_cap",
+                    message: `Total attachment size ${totalBytes} exceeds ${ATTACHMENT_LIMITS.PER_TURN_MAX_BYTES} bytes per turn`,
+                }, 400);
+            }
+        }
+        if (!body.content && attachmentIds.length === 0) {
+            return c.json({ error: "empty_turn", message: "Must provide content or attachmentIds" }, 400);
+        }
+        // Narrowly accept requestedModel from the client. Unlike free-form
+        // metadata (still rejected on this path to prevent prompt injection
+        // via adapter → dispatcher → prompt context), requestedModel is a
+        // bounded enum that only affects BackendRouter tier selection and
+        // never reaches prompt content. It is the legacy Claude-only form of
+        // the dashboard chat model override — the newer
+        // (requestedBackendId, requestedModelId) pair is its cross-backend
+        // superset. Callers MUST NOT send both; the client would then be
+        // asking "please route to Opus OR to gemini-2.5-pro" with no defined
+        // precedence. We reject the ambiguous case rather than silently
+        // preferring one.
+        const hasRequestedModel = body.requestedModel !== undefined;
+        const hasRequestedPair = body.requestedBackendId !== undefined || body.requestedModelId !== undefined;
+        if (hasRequestedModel && hasRequestedPair) {
+            return c.json({
+                error: "conflicting_model_override",
+                message: "requestedModel and (requestedBackendId, requestedModelId) are mutually exclusive",
+            }, 400);
+        }
+        let requestedModel;
+        if (hasRequestedModel) {
+            if (body.requestedModel === "sonnet" || body.requestedModel === "opus") {
+                requestedModel = body.requestedModel;
+            }
+            else {
+                return c.json({
+                    error: "invalid_requestedModel",
+                    message: "requestedModel must be 'sonnet' or 'opus'",
+                }, 400);
+            }
+        }
+        // Accept an explicit (backendId, modelId) pair from the dashboard chat
+        // model picker — the superset of requestedModel that lets the user
+        // target any registered model on any enabled backend, not just Claude
+        // sonnet/opus. Validation rules (all must hold):
+        //   1. Both fields present and strings (partial pair is rejected).
+        //   2. backendId is a known BackendId enum value.
+        //   3. (backend, model) passes the deps.validateChatModelOverride
+        //      check — i.e. the backend row has enabled=1 and the model is in
+        //      the registry for that backend. We do NOT trust the client here;
+        //      without DB-side validation, a crafted request could route to a
+        //      disabled backend.
+        let requestedBackendId;
+        let requestedModelId;
+        const hasBackend = body.requestedBackendId !== undefined;
+        const hasModel = body.requestedModelId !== undefined;
+        if (hasBackend || hasModel) {
+            if (!hasBackend || !hasModel) {
+                return c.json({
+                    error: "invalid_requestedBackendModel",
+                    message: "requestedBackendId and requestedModelId must be provided together",
+                }, 400);
+            }
+            if (typeof body.requestedBackendId !== "string" ||
+                typeof body.requestedModelId !== "string" ||
+                !isBackendId(body.requestedBackendId)) {
+                return c.json({
+                    error: "invalid_requestedBackendModel",
+                    message: "requestedBackendId must be a valid BackendId and requestedModelId a string",
+                }, 400);
+            }
+            const backend = body.requestedBackendId;
+            const model = body.requestedModelId;
+            if (!deps.validateChatModelOverride ||
+                !deps.validateChatModelOverride(backend, model)) {
+                return c.json({
+                    error: "invalid_requestedBackendModel",
+                    message: `Backend "${backend}" is not enabled or model "${model}" is not registered for it`,
+                }, 400);
+            }
+            requestedBackendId = backend;
+            requestedModelId = model;
+        }
+        if (!dashboardAdapter.isConnected(body.channelId)) {
+            logger.warn({ channelId: body.channelId, activeChannels: dashboardAdapter.getActiveChannels().length }, "Chat message rejected — channel not connected");
+            return c.json({ error: "channel not connected" }, 404);
+        }
+        dashboardAdapter.handleIncomingMessage(body.channelId, body.content, {
+            ...(requestedModel ? { requestedModel } : {}),
+            ...(requestedBackendId && requestedModelId
+                ? { requestedBackendId, requestedModelId }
+                : {}),
+            ...(attachmentIds.length > 0 ? { attachmentIds } : {}),
+        });
+        return c.json({ status: "accepted" });
+    });
+    // ── Events SSE stream ──
+    app.get("/events/stream", (c) => {
+        return streamSSE(c, async (stream) => {
+            const client = {
+                async write(event, data) {
+                    await stream.writeSSE({ event, data });
+                },
+            };
+            eventBroadcaster.register(client);
+            stream.onAbort(() => {
+                eventBroadcaster.unregister(client);
+            });
+            // Emit an immediate frame so proxies flush the stream promptly.
+            await stream.writeSSE({ event: "ping", data: "" }).catch(() => { });
+            // Keep alive
+            while (!stream.aborted) {
+                await stream.sleep(30_000);
+                if (!stream.aborted) {
+                    await stream.writeSSE({ event: "ping", data: "" }).catch(() => { });
+                }
+            }
+        });
+    });
+    // ── System Logs SSE stream ──
+    app.get("/logs/stream", (c) => {
+        const logBuffer = getLogBuffer();
+        return streamSSE(c, async (stream) => {
+            let consecutiveErrors = 0;
+            const unsubscribe = logBuffer.subscribe((entry) => {
+                stream
+                    .writeSSE({ event: "log", data: JSON.stringify(entry) })
+                    .then(() => {
+                    consecutiveErrors = 0;
+                })
+                    .catch(() => {
+                    consecutiveErrors++;
+                    // Unsubscribe after repeated failures — stream is likely dead
+                    if (consecutiveErrors >= 3) {
+                        unsubscribe();
+                    }
+                });
+            });
+            stream.onAbort(() => {
+                unsubscribe();
+            });
+            // Emit an immediate frame so proxies flush the stream promptly.
+            await stream.writeSSE({ event: "ping", data: "" }).catch(() => { });
+            // Keep alive
+            while (!stream.aborted) {
+                await stream.sleep(30_000);
+                if (!stream.aborted) {
+                    await stream.writeSSE({ event: "ping", data: "" }).catch(() => { });
+                }
+            }
+        });
+    });
+    // ── System Logs REST ──
+    app.get("/logs", (c) => {
+        const logBuffer = getLogBuffer();
+        const limit = Math.min(Math.max(parseInt(c.req.query("limit") ?? "200", 10) || 200, 1), 500);
+        const afterIdRaw = c.req.query("afterId");
+        const afterId = afterIdRaw ? Number(afterIdRaw) : undefined;
+        const level = c.req.query("level") || undefined;
+        const loggerName = c.req.query("logger") || undefined;
+        const logs = logBuffer.getRecent(limit, {
+            level,
+            logger: loggerName,
+            afterId: afterId && Number.isFinite(afterId) && afterId > 0 ? afterId : undefined,
+        });
+        const loggers = logBuffer.getLoggerNames();
+        return c.json({ logs, loggers });
+    });
+    return app;
+}
+//# sourceMappingURL=sse.js.map