@amalgm/shell 0.1.0

package/dist/diagnostics-host.js

@@ -0,0 +1,92 @@
+import { open, stat } from "node:fs/promises";
+import { join } from "node:path";
+import { createDiagnosticsApi } from "@amalgm/core/diagnostics";
+/** Filesystem effects for Core's bounded diagnostics law. */
+export function diagnosticsMount(logDir) {
+    const api = createDiagnosticsApi(diagnosticLogHost(logDir));
+    return {
+        prefix: "/diagnostics",
+        stream: async (req, res, pathname) => {
+            try {
+                const response = await api(await fetchRequest(req, pathname));
+                res.writeHead(response.status, Object.fromEntries(response.headers.entries()));
+                res.end(Buffer.from(await response.arrayBuffer()));
+            }
+            catch (error) {
+                res.writeHead(500, { "content-type": "application/json" });
+                res.end(JSON.stringify({ error: error instanceof Error ? error.message : "internal error" }));
+            }
+        },
+    };
+}
+function diagnosticLogHost(logDir) {
+    return {
+        async readTail(filename, maxBytes) {
+            const path = join(logDir, filename);
+            try {
+                const stats = await stat(path);
+                if (!stats.isFile())
+                    return { kind: "not_file", path };
+                const bytes = Math.min(stats.size, maxBytes);
+                if (bytes === 0) {
+                    return {
+                        kind: "found",
+                        tail: {
+                            path,
+                            size: stats.size,
+                            mtime: stats.mtime.toISOString(),
+                            bytes: 0,
+                            content: "",
+                            byteTruncated: false,
+                        },
+                    };
+                }
+                const file = await open(path, "r");
+                try {
+                    const buffer = Buffer.alloc(bytes);
+                    await file.read(buffer, 0, bytes, stats.size - bytes);
+                    return {
+                        kind: "found",
+                        tail: {
+                            path,
+                            size: stats.size,
+                            mtime: stats.mtime.toISOString(),
+                            bytes,
+                            content: buffer.toString("utf8"),
+                            byteTruncated: stats.size > bytes,
+                        },
+                    };
+                }
+                finally {
+                    await file.close();
+                }
+            }
+            catch (error) {
+                if (error && typeof error === "object" && "code" in error && error.code === "ENOENT") {
+                    return { kind: "not_found", path };
+                }
+                return {
+                    kind: "error",
+                    path,
+                    message: error instanceof Error ? error.message : "Failed to read diagnostic log",
+                };
+            }
+        },
+    };
+}
+async function fetchRequest(req, pathname) {
+    const url = new URL(req.url ?? pathname, "http://diagnostics.local");
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(req.headers)) {
+        if (Array.isArray(value))
+            for (const item of value)
+                headers.append(name, item);
+        else if (value !== undefined)
+            headers.set(name, value);
+    }
+    return new Request(`http://diagnostics.local${pathname}${url.search}`, {
+        method: req.method ?? "GET",
+        headers,
+    });
+}
+//# sourceMappingURL=diagnostics-host.js.map

package/dist/diagnostics-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics-host.js","sourceRoot":"","sources":["../src/diagnostics-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAKhE,6DAA6D;AAC7D,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,GAAG,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,OAAO;QACL,MAAM,EAAE,cAAc;QACtB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;gBAC9D,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC/E,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBACvD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC7C,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,OAAO;wBACL,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE;4BACJ,IAAI;4BACJ,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;4BAChC,KAAK,EAAE,CAAC;4BACR,OAAO,EAAE,EAAE;4BACX,aAAa,EAAE,KAAK;yBACrB;qBACF,CAAC;gBACJ,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBACnC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;oBACtD,OAAO;wBACL,IAAI,EAAE,OAAO;wBACb,IAAI,EAAE;4BACJ,IAAI;4BACJ,IAAI,EAAE,KAAK,CAAC,IAAI;4BAChB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;4BAChC,KAAK;4BACL,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;4BAChC,aAAa,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK;yBAClC;qBACF,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;gBACrC,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,IAAI;oBACJ,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B;iBAClF,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,GAAoB,EAAE,QAAgB;IAChE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;aAC1E,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,2BAA2B,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,EAAE;QACrE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;QAC3B,OAAO;KACR,CAAC,CAAC;AACL,CAAC"}

package/dist/drivers/claude-code.d.ts

@@ -0,0 +1,27 @@
+import type { ChatDriver } from "../chat-host.js";
+/** The SDK surface the driver consumes: a prompt in, a message stream out. */
+export type ClaudeQuery = (input: {
+    prompt: string;
+    options?: Record<string, unknown>;
+}) => AsyncIterable<Record<string, unknown>>;
+export interface ClaudeCodeDriverOptions {
+    /**
+     * The turn-running query function. Defaults to the real
+     * @anthropic-ai/claude-agent-sdk `query` — the same SDK the engine's
+     * claude adapter calls. Inject a fake to test the wiring without a model.
+     */
+    query?: ClaudeQuery;
+    /** Extra SDK options merged over the defaults (model, cwd, mcpServers…). */
+    queryOptions?: Record<string, unknown>;
+    cwd?: string;
+    clockMs?: () => number;
+}
+/**
+ * The real chat driver: the engine's claude adapter loop
+ * (chat-core/adapters/claude.js:99-161) composed from brick law. Every SDK
+ * message goes through the chat brick's Claude normalizer; the result
+ * message becomes usageFinal records, an error event when the turn failed,
+ * and done — the same order the engine yields them. Provider sessions are
+ * remembered per amalgm session so follow-up turns resume.
+ */
+export declare function createClaudeCodeDriver(options?: ClaudeCodeDriverOptions): ChatDriver;

package/dist/drivers/claude-code.js

@@ -0,0 +1,72 @@
+import { createEventConstructors } from "@amalgm/chat/events";
+import { createClaudeNormalizer } from "@amalgm/chat/normalizers";
+/**
+ * The real chat driver: the engine's claude adapter loop
+ * (chat-core/adapters/claude.js:99-161) composed from brick law. Every SDK
+ * message goes through the chat brick's Claude normalizer; the result
+ * message becomes usageFinal records, an error event when the turn failed,
+ * and done — the same order the engine yields them. Provider sessions are
+ * remembered per amalgm session so follow-up turns resume.
+ */
+export function createClaudeCodeDriver(options = {}) {
+    const events = createEventConstructors({ clockMs: options.clockMs ?? (() => Date.now()) });
+    const normalizer = createClaudeNormalizer(events);
+    const providerSessions = new Map();
+    return {
+        async run(input, emit) {
+            const query = options.query ??
+                (await import("@anthropic-ai/claude-agent-sdk")).query;
+            const resume = providerSessions.get(input.sessionId);
+            const state = { providerSessionId: resume ?? null };
+            emit(events.reasoningStarted({ providerSessionId: state.providerSessionId }));
+            const stream = query({
+                prompt: input.prompt,
+                options: {
+                    cwd: options.cwd ?? process.cwd(),
+                    permissionMode: "bypassPermissions",
+                    includePartialMessages: true,
+                    ...(resume ? { resume } : {}),
+                    ...options.queryOptions,
+                },
+            });
+            for await (const message of stream) {
+                if (typeof message.session_id === "string" && message.session_id) {
+                    providerSessions.set(input.sessionId, message.session_id);
+                    state.providerSessionId = message.session_id;
+                }
+                const normalized = normalizer.normalizeClaudeMessage(message, state);
+                if (normalized.length > 0) {
+                    for (const event of normalized)
+                        emit(event);
+                    continue;
+                }
+                if (message.type === "result") {
+                    const raw = { source: "claude.sdk.message", method: "claude/result", payload: message };
+                    const usageRecords = normalizer.usageRecordsFromClaudeResult(message, undefined);
+                    if (usageRecords.length === 0) {
+                        usageRecords.push(normalizer.usageFromClaude(message.usage, undefined));
+                    }
+                    for (const usageRecord of usageRecords) {
+                        emit(events.usageFinal({
+                            ...usageRecord,
+                            costUsd: usageRecords.length === 1 ? (message.total_cost_usd ?? null) : null,
+                        }, { providerSessionId: state.providerSessionId, raw }));
+                    }
+                    if (message.is_error) {
+                        const errors = Array.isArray(message.errors) ? message.errors.join("\n") : null;
+                        emit(events.errorEvent(errors || message.stop_reason || "Claude turn failed", {
+                            providerSessionId: state.providerSessionId,
+                            raw,
+                        }));
+                    }
+                    emit(events.done({
+                        providerSessionId: state.providerSessionId,
+                        stopReason: message.stop_reason || "end_turn",
+                        raw,
+                    }));
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=claude-code.js.map

package/dist/drivers/claude-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code.js","sourceRoot":"","sources":["../../src/drivers/claude-code.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAuBlE;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAmC,EAAE;IAC1E,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEnD,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI;YACnB,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;gBACZ,CAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAuC,CAAC,KAAK,CAAC;YAEhG,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,KAAK,GAA4B,EAAE,iBAAiB,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;YAE9E,MAAM,MAAM,GAAG,KAAK,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE;oBACP,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;oBACjC,cAAc,EAAE,mBAAmB;oBACnC,sBAAsB,EAAE,IAAI;oBAC5B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7B,GAAG,OAAO,CAAC,YAAY;iBACxB;aACF,CAAC,CAAC;YAEH,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,EAAE,CAAC;gBACnC,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACjE,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;oBAC1D,KAAK,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC;gBAC/C,CAAC;gBAED,MAAM,UAAU,GAAG,UAAU,CAAC,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACrE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,KAAK,MAAM,KAAK,IAAI,UAAU;wBAAE,IAAI,CAAC,KAAgC,CAAC,CAAC;oBACvE,SAAS;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC9B,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;oBACxF,MAAM,YAAY,GAAG,UAAU,CAAC,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACjF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBAC9B,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,KAAc,EAAE,SAAS,CAAC,CAAC,CAAC;oBACnF,CAAC;oBACD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;wBACvC,IAAI,CACF,MAAM,CAAC,UAAU,CACf;4BACE,GAAG,WAAW;4BACd,OAAO,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;yBAC7E,EACD,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,GAAG,EAAE,CACpD,CACF,CAAC;oBACJ,CAAC;oBACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;wBACrB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;wBAChF,IAAI,CACF,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,IAAI,oBAAoB,EAAE;4BACvE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;4BAC1C,GAAG;yBACJ,CAAC,CACH,CAAC;oBACJ,CAAC;oBACD,IAAI,CACF,MAAM,CAAC,IAAI,CAAC;wBACV,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;wBAC1C,UAAU,EAAG,OAAO,CAAC,WAAsB,IAAI,UAAU;wBACzD,GAAG;qBACJ,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/event-triggers-host.d.ts

@@ -0,0 +1,4 @@
+import type { AutomationsHostConfig } from "./automations-host.js";
+import type { BrickMount } from "./gateway.js";
+/** Legacy root projection over the Automations brick's canonical trigger CRUD. */
+export declare function eventTriggersMount(config: AutomationsHostConfig): BrickMount;

package/dist/event-triggers-host.js

@@ -0,0 +1,48 @@
+import { automationPrincipal } from "./automations-host.js";
+async function listAutomations(config, request) {
+    const principal = await automationPrincipal(config, request);
+    const crud = config.service.for(principal);
+    const automations = [];
+    for (let offset = 0;; offset += 100) {
+        const page = await crud.automations.list({ limit: 100, offset });
+        automations.push(...page.items);
+        if (!page.hasMore)
+            break;
+    }
+    const triggerGroups = await Promise.all(automations.map(async (automation) => ((await crud.triggers.list(automation.id)).map((trigger) => ({
+        ...trigger,
+        automationName: automation.name || "",
+        automationDescription: automation.description || "",
+        targetId: automation.targetId,
+    })))));
+    return { automations, triggers: triggerGroups.flat() };
+}
+/** Legacy root projection over the Automations brick's canonical trigger CRUD. */
+export function eventTriggersMount(config) {
+    return {
+        prefix: "/event-triggers",
+        stream: async (req, res, pathname) => {
+            if (pathname !== "/event-triggers" || req.method !== "GET") {
+                res.writeHead(req.method === "GET" ? 404 : 405, { "content-type": "application/json" });
+                res.end(JSON.stringify({ error: req.method === "GET" ? "not found" : "method not allowed" }));
+                return;
+            }
+            const headers = {};
+            for (const [name, value] of Object.entries(req.headers)) {
+                if (typeof value === "string")
+                    headers[name] = value;
+            }
+            try {
+                const request = new Request("http://automations.local/event-triggers", { headers });
+                const result = await listAutomations(config, request);
+                res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+                res.end(JSON.stringify(result));
+            }
+            catch {
+                res.writeHead(500, { "content-type": "application/json", "cache-control": "no-store" });
+                res.end(JSON.stringify({ error: "Automations service failed" }));
+            }
+        },
+    };
+}
+//# sourceMappingURL=event-triggers-host.js.map

package/dist/event-triggers-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-triggers-host.js","sourceRoot":"","sources":["../src/event-triggers-host.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAI5D,KAAK,UAAU,eAAe,CAAC,MAA6B,EAAE,OAAgB;IAI5E,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM;IAC3B,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAC5E,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1D,GAAG,OAAO;QACV,cAAc,EAAE,UAAU,CAAC,IAAI,IAAI,EAAE;QACrC,qBAAqB,EAAE,UAAU,CAAC,WAAW,IAAI,EAAE;QACnD,QAAQ,EAAE,UAAU,CAAC,QAAQ;KAC9B,CAAC,CAAC,CACJ,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;AACzD,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,MAA6B;IAC9D,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnC,IAAI,QAAQ,KAAK,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3D,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACxF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;gBAC9F,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACvD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,yCAAyC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBACpF,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACtD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;gBACxF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/events-host.d.ts

@@ -0,0 +1,9 @@
+import { type AutomationEventsApiConfig } from "@amalgm/automations";
+import type { BrickMount } from "./gateway.js";
+export type AutomationEventsHostConfig = AutomationEventsApiConfig;
+/**
+ * Node HTTP transport for the Automations brick's /events Fetch API. Target
+ * identity and delivery capabilities are injected; all ingress decisions stay
+ * in @amalgm/automations.
+ */
+export declare function automationEventsMount(config: AutomationEventsHostConfig): BrickMount;

package/dist/events-host.js

@@ -0,0 +1,34 @@
+import { Readable } from "node:stream";
+import { createAutomationEventsApi, } from "@amalgm/automations";
+/**
+ * Node HTTP transport for the Automations brick's /events Fetch API. Target
+ * identity and delivery capabilities are injected; all ingress decisions stay
+ * in @amalgm/automations.
+ */
+export function automationEventsMount(config) {
+    const api = createAutomationEventsApi(config);
+    return {
+        prefix: "/events",
+        stream: async (req, res, pathname) => {
+            const source = new URL(req.url ?? pathname, "http://localhost");
+            const headers = new Headers();
+            for (const [name, value] of Object.entries(req.headers)) {
+                if (Array.isArray(value))
+                    headers.set(name, value.join(", "));
+                else if (value !== undefined)
+                    headers.set(name, value);
+            }
+            const method = req.method ?? "GET";
+            const init = { method, headers };
+            if (method !== "GET" && method !== "HEAD") {
+                init.body = Readable.toWeb(req);
+                init.duplex = "half";
+            }
+            const request = new Request(`http://automations.local${pathname}${source.search}`, init);
+            const response = await api(request);
+            res.writeHead(response.status, Object.fromEntries(response.headers.entries()));
+            res.end(Buffer.from(await response.arrayBuffer()));
+        },
+    };
+}
+//# sourceMappingURL=events-host.js.map

package/dist/events-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events-host.js","sourceRoot":"","sources":["../src/events-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EACL,yBAAyB,GAE1B,MAAM,qBAAqB,CAAC;AAM7B;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAkC;IACtE,MAAM,GAAG,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;qBACzD,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YACnC,MAAM,IAAI,GAAsC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACpE,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1C,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAA+B,CAAC;gBAC9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACvB,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,OAAO,CACzB,2BAA2B,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,EACrD,IAAI,CACL,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC/E,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/external-proxy-host.d.ts

@@ -0,0 +1,15 @@
+import type { Apps } from "@amalgm/apps";
+import type { BrickMount, BrickUpgradeMount } from "./gateway.js";
+export interface ExternalProxyHostConfig {
+    readonly apps: Apps;
+    readonly gatewayPort: () => number | null;
+    readonly localAgentAppPort: number | null;
+    readonly monitoredPreviewPorts?: () => ReadonlySet<number>;
+}
+export interface ExternalProxyHost {
+    readonly mount: BrickMount;
+    readonly upgrade: BrickUpgradeMount;
+    close(): void;
+}
+/** Engine reference: amalgm-engine/runtime/scripts/local-gateway.js:180-250,656-769,924-1000. */
+export declare function createExternalProxyHost(config: ExternalProxyHostConfig): ExternalProxyHost;

package/dist/external-proxy-host.js

@@ -0,0 +1,166 @@
+import { request as httpRequest } from "node:http";
+import { externalProxyTargetForPath, HOP_BY_HOP_HEADERS, isAllowedPreviewPort, isAppRoutable, normalizeAppRef, RUNTIME_TOKEN_HEADER, stripHeaders, WS_CLOSE_POLICY_VIOLATION, WS_CLOSE_UNAUTHORIZED, WS_CLOSE_UPSTREAM_FAILURE, WS_HANDSHAKE_HEADERS, } from "@amalgm/core/transport";
+import { WebSocket, WebSocketServer } from "ws";
+/** Engine reference: amalgm-engine/runtime/scripts/local-gateway.js:180-250,656-769,924-1000. */
+export function createExternalProxyHost(config) {
+    const wss = new WebSocketServer({ noServer: true });
+    const sockets = new Set();
+    const resolve = (pathname) => resolveTarget(pathname, config);
+    return {
+        mount: {
+            prefix: "/__amalgm",
+            stream(req, res, pathname) {
+                if (req.method === "GET" && pathname === "/__amalgm") {
+                    const apps = routableApps(config.apps);
+                    res.writeHead(200, { "content-type": "application/json", "cache-control": "no-store" });
+                    res.end(JSON.stringify({
+                        service: "external-proxy",
+                        apps: apps.map((app) => ({ appRef: normalizeAppRef(app), port: Number(app.port), name: app.name })),
+                        previewPorts: [...new Set(apps.map((app) => Number(app.port)))],
+                    }));
+                    return;
+                }
+                const target = resolve(pathname);
+                if (!target) {
+                    jsonError(res, 404, "Unknown local gateway route");
+                    return;
+                }
+                if ("error" in target) {
+                    jsonError(res, target.error.status, target.error.message);
+                    return;
+                }
+                proxyHttp(req, res, target);
+            },
+        },
+        upgrade: {
+            prefix: "/__amalgm",
+            handle(req, socket, head, authorized) {
+                wss.handleUpgrade(req, socket, head, (client) => {
+                    sockets.add(client);
+                    client.on("close", () => sockets.delete(client));
+                    if (!authorized) {
+                        client.close(WS_CLOSE_UNAUTHORIZED.code, WS_CLOSE_UNAUTHORIZED.reason);
+                        return;
+                    }
+                    const pathname = new URL(req.url ?? "/", "http://proxy.local").pathname;
+                    const target = resolve(pathname);
+                    if (!target) {
+                        client.close(WS_CLOSE_POLICY_VIOLATION, "Unknown local gateway route");
+                        return;
+                    }
+                    if ("error" in target) {
+                        client.close(target.error.status === 403 ? WS_CLOSE_POLICY_VIOLATION : WS_CLOSE_UPSTREAM_FAILURE, target.error.message);
+                        return;
+                    }
+                    proxyWebSocket(req, client, target, sockets);
+                });
+            },
+        },
+        close() {
+            for (const socket of sockets)
+                socket.terminate();
+            sockets.clear();
+        },
+    };
+}
+function resolveTarget(pathname, config) {
+    const apps = routableApps(config.apps);
+    const activeAppPorts = new Set(apps.map((app) => Number(app.port)));
+    return externalProxyTargetForPath(pathname, {
+        appPortForRef(appRef) {
+            const app = apps.find((candidate) => normalizeAppRef(candidate) === appRef);
+            return app ? Number(app.port) : null;
+        },
+        isAllowedPreviewPort(port) {
+            const gatewayPort = config.gatewayPort();
+            return isAllowedPreviewPort(port, {
+                internal: {
+                    localAgentAppPort: config.localAgentAppPort,
+                    servicePorts: gatewayPort === null ? [] : [gatewayPort],
+                },
+                activeAppPorts,
+                monitoredPreviewPorts: config.monitoredPreviewPorts?.() ?? new Set(),
+            });
+        },
+    });
+}
+function routableApps(apps) {
+    return apps.list().filter(isAppRoutable);
+}
+function proxyHttp(req, res, target) {
+    const url = new URL(req.url ?? "/", "http://proxy.local");
+    const headers = externalHeaders(req.headers, HOP_BY_HOP_HEADERS);
+    const forwardedHost = firstHeader(req.headers["x-forwarded-host"]);
+    const upstream = httpRequest({
+        host: "127.0.0.1",
+        port: target.port,
+        method: req.method,
+        path: forwardPath(url, target.prefix),
+        headers: { ...headers, host: forwardedHost || `127.0.0.1:${target.port}` },
+        timeout: 60_000,
+    }, (response) => {
+        res.writeHead(response.statusCode ?? 502, stripHeaders(response.headers, HOP_BY_HOP_HEADERS));
+        response.pipe(res);
+    });
+    upstream.on("timeout", () => upstream.destroy(new Error("Upstream request timed out")));
+    upstream.on("error", (error) => {
+        if (!res.headersSent) {
+            res.writeHead(502, { "content-type": "application/json" });
+            res.end(JSON.stringify({ error: "External preview request failed", detail: error.message }));
+            return;
+        }
+        res.destroy(error);
+    });
+    res.on("close", () => {
+        if (!res.writableFinished)
+            upstream.destroy();
+    });
+    req.pipe(upstream);
+}
+function proxyWebSocket(req, client, target, sockets) {
+    const url = new URL(req.url ?? "/", "http://proxy.local");
+    const protocols = firstHeader(req.headers["sec-websocket-protocol"])
+        .split(",").map((value) => value.trim()).filter(Boolean);
+    const headers = externalHeaders(req.headers, new Set([...HOP_BY_HOP_HEADERS, ...WS_HANDSHAKE_HEADERS]));
+    const address = `ws://127.0.0.1:${target.port}${forwardPath(url, target.prefix)}`;
+    const upstream = protocols.length > 0
+        ? new WebSocket(address, protocols, { headers })
+        : new WebSocket(address, { headers });
+    sockets.add(upstream);
+    client.on("message", (data, isBinary) => {
+        if (upstream.readyState === WebSocket.OPEN)
+            upstream.send(data, { binary: isBinary });
+    });
+    upstream.on("message", (data, isBinary) => {
+        if (client.readyState === WebSocket.OPEN)
+            client.send(data, { binary: isBinary });
+    });
+    client.on("close", (code, reason) => upstream.close(code, reason.toString("utf8")));
+    upstream.on("close", (code, reason) => {
+        sockets.delete(upstream);
+        client.close(code, reason.toString("utf8"));
+    });
+    upstream.on("error", (error) => client.close(WS_CLOSE_UPSTREAM_FAILURE, error.message));
+}
+function externalHeaders(headers, drop) {
+    const out = stripHeaders(headers, drop);
+    for (const name of Object.keys(out)) {
+        if (name.toLowerCase() === RUNTIME_TOKEN_HEADER)
+            delete out[name];
+    }
+    return out;
+}
+function forwardPath(url, prefix) {
+    const pathname = url.pathname.slice(prefix.length) || "/";
+    return `${pathname.startsWith("/") ? pathname : `/${pathname}`}${url.search}`;
+}
+function firstHeader(value) {
+    if (typeof value === "string")
+        return value;
+    return value?.[0] ?? "";
+}
+function jsonError(res, status, error) {
+    res.writeHead(status, { "content-type": "application/json", "cache-control": "no-store" });
+    res.end(JSON.stringify({ error }));
+}
+//# sourceMappingURL=external-proxy-host.js.map

package/dist/external-proxy-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-proxy-host.js","sourceRoot":"","sources":["../src/external-proxy-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAInD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,YAAY,EACZ,yBAAyB,EACzB,qBAAqB,EACrB,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAiBhD,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,MAA+B;IACrE,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAa,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEtE,OAAO;QACL,KAAK,EAAE;YACL,MAAM,EAAE,WAAW;YACnB,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ;gBACvB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;oBACrD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACvC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;oBACxF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;wBACrB,OAAO,EAAE,gBAAgB;wBACzB,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;wBACnG,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;qBAChE,CAAC,CAAC,CAAC;oBACJ,OAAO;gBACT,CAAC;gBACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACjC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,6BAA6B,CAAC,CAAC;oBACnD,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC1D,OAAO;gBACT,CAAC;gBACD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9B,CAAC;SACF;QACD,OAAO,EAAE;YACP,MAAM,EAAE,WAAW;YACnB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU;gBAClC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE;oBAC9C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;oBACjD,IAAI,CAAC,UAAU,EAAE,CAAC;wBAChB,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;wBACvE,OAAO;oBACT,CAAC;oBACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC;oBACxE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;oBACjC,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,6BAA6B,CAAC,CAAC;wBACvE,OAAO;oBACT,CAAC;oBACD,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;wBACtB,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,yBAAyB,EACnF,MAAM,CAAC,KAAK,CAAC,OAAO,CACrB,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC,CAAC,CAAC;YACL,CAAC;SACF;QACD,KAAK;YACH,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,SAAS,EAAE,CAAC;YACjD,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAA+B;IACtE,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,0BAA0B,CAAC,QAAQ,EAAE;QAC1C,aAAa,CAAC,MAAM;YAClB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,CAAC;YAC5E,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC;QACD,oBAAoB,CAAC,IAAI;YACvB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACzC,OAAO,oBAAoB,CAAC,IAAI,EAAE;gBAChC,QAAQ,EAAE;oBACR,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;oBAC3C,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;iBACxD;gBACD,cAAc;gBACd,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,EAAE,IAAI,IAAI,GAAG,EAAE;aACrE,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAU;IAC9B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,SAAS,CAChB,GAAoB,EACpB,GAAqD,EACrD,MAAwE;IAExE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,WAAW,CAAC;QAC3B,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;QACrC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,aAAa,IAAI,aAAa,MAAM,CAAC,IAAI,EAAE,EAAE;QAC1E,OAAO,EAAE,MAAM;KAChB,EAAE,CAAC,QAAQ,EAAE,EAAE;QACd,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;QAC9F,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IACxF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACnB,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CACrB,GAAoB,EACpB,MAAiB,EACjB,MAAwE,EACxE,OAAuB;IAEvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;SACjE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,EAAE,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,kBAAkB,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC;QACnC,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC;QAChD,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEtB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;QACtC,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;QACxC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QACpC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,eAAe,CACtB,OAAmC,EACnC,IAAyB;IAEzB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,oBAAoB;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAQ,EAAE,MAAc;IAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAC1D,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,KAA6C;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAChB,GAAqD,EACrD,MAAc,EACd,KAAa;IAEb,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3F,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/filesystem.d.ts

@@ -0,0 +1,7 @@
+export declare function ensurePrivateDir(directory: string): void;
+export declare function atomicWrite(file: string, bytes: string | Uint8Array, mode?: number): void;
+export declare function readJson<T>(file: string): T | null;
+export declare function atomicJson(file: string, value: unknown): void;
+/** Commit related JSON documents without ever leaving a split public/secret
+ * pair. Existing files are restored if any rename fails. */
+export declare function atomicJsonSet(documents: readonly (readonly [string, unknown])[]): void;

package/dist/filesystem.js

@@ -0,0 +1,71 @@
+import { randomUUID } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { dirname } from "node:path";
+export function ensurePrivateDir(directory) {
+    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    chmodSync(directory, 0o700);
+}
+export function atomicWrite(file, bytes, mode = 0o600) {
+    ensurePrivateDir(dirname(file));
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    try {
+        writeFileSync(temporary, bytes, { mode, flag: "wx" });
+        renameSync(temporary, file);
+        chmodSync(file, mode);
+    }
+    finally {
+        rmSync(temporary, { force: true });
+    }
+}
+export function readJson(file) {
+    try {
+        return JSON.parse(readFileSync(file, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+export function atomicJson(file, value) {
+    atomicWrite(file, `${JSON.stringify(value, null, 2)}\n`);
+}
+/** Commit related JSON documents without ever leaving a split public/secret
+ * pair. Existing files are restored if any rename fails. */
+export function atomicJsonSet(documents) {
+    const transaction = randomUUID();
+    const temporary = [];
+    const backups = [];
+    const written = [];
+    try {
+        for (const [file, value] of documents) {
+            const temp = `${file}.${transaction}.tmp`;
+            ensurePrivateDir(dirname(file));
+            writeFileSync(temp, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600, flag: "wx" });
+            temporary.push(temp);
+        }
+        for (let index = 0; index < documents.length; index += 1) {
+            const [file] = documents[index];
+            const backup = `${file}.${transaction}.bak`;
+            if (existsSync(file)) {
+                renameSync(file, backup);
+                backups.push([file, backup]);
+            }
+            renameSync(temporary[index], file);
+            chmodSync(file, 0o600);
+            written.push(file);
+        }
+        for (const [, backup] of backups)
+            rmSync(backup, { force: true });
+    }
+    catch (error) {
+        for (const file of written)
+            rmSync(file, { force: true });
+        for (const [file, backup] of [...backups].reverse()) {
+            if (existsSync(backup))
+                renameSync(backup, file);
+        }
+        for (const temp of temporary)
+            rmSync(temp, { force: true });
+        throw error;
+    }
+}
+//# sourceMappingURL=filesystem.js.map

package/dist/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../src/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAA0B,EAAE,IAAI,GAAG,KAAK;IAChF,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5B,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAI,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,KAAc;IACrD,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,aAAa,CAAC,SAAkD;IAC9E,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,WAAW,MAAM,CAAC;YAC1C,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxF,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAA+B,CAAC;YAC9D,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,WAAW,MAAM,CAAC;YAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/B,CAAC;YACD,UAAU,CAAC,SAAS,CAAC,KAAK,CAAW,EAAE,IAAI,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,UAAU,CAAC,MAAM,CAAC;gBAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/forward.d.ts

@@ -0,0 +1,11 @@
+import type { BrickMount } from "./gateway.js";
+/**
+ * Forward a gateway prefix to a brick's own HTTP server on loopback —
+ * the engine's gateway architecture (prefixes route to per-service ports)
+ * applied inside the shell. The prefix is re-rooted onto the brick
+ * server's own root (both agents and browser root their APIs at /v1):
+ * /agents/sessions reaches the agents server as /v1/sessions.
+ */
+export declare function forwardMount(prefix: string, port: () => number, options?: {
+    root?: string;
+}): BrickMount;