@antelopejs/dms-ai 0.1.2 → 0.1.3

package/README.md

@@ -23,6 +23,36 @@ The module starts its bundled sidecar with the project as its working directory.
 set `DMS_AI=0` before starting the backend to disable the sidecar. If
 `@antelopejs/dms-builder` is installed, the assistant also exposes its builder integration.
 
+The assistant is a development tool, on purpose: the backend and the sidecar refuse to run with
+`NODE_ENV=production`, and the chat is reserved to owners. Remote *development* is supported (see
+below); a hosted use would be a separate product with its own design.
+
+## Remote access
+
+The sidecar only listens on `127.0.0.1`, and the browser never talks to it: everything goes through
+the DMS frontend server, over the same HTTP relay as the rest of the dashboard. The assistant
+therefore works wherever the dashboard does — another machine on the LAN, Tailscale, an SSH tunnel to
+the frontend port, a reverse proxy or a gateway — and the sidecar's port and client credential stay on
+the server.
+
+| Route (owner only)                         | Purpose                                                                  |
+| ------------------------------------------ | ------------------------------------------------------------------------ |
+| `GET /ai/channels/host,chat/events`        | One event stream per tab: the dashboard's and the chat's sidecar frames. |
+| `POST /ai/channels/:connectionId/messages` | One client message, relayed to that channel's sidecar socket.            |
+| `GET /api/ai/chatbox/*`                    | The chat document and its assets, from the sidecar's static server.      |
+
+Browsers keep at most six HTTP/1.1 connections per origin, and every dashboard tab already holds two
+long-lived ones for the DMS. The assistant adds its stream only in the visible tab whose panel is
+open, which leaves two dashboard tabs usable side by side; over HTTPS with HTTP/2 the limit goes away.
+Over plain HTTP on an address other than `localhost`, start the frontend server with
+`DMS_COOKIE_SECURE=false`, or the browser drops the `Secure` session cookie.
+
+The chat document is served from the dashboard's own origin and renders model output, so it runs
+under a strict Content-Security-Policy: scripts from the bundle only, and no image, font or request
+outside the origin (bar the Iconify API its icons come from). The frame is not sandboxed: without
+`allow-same-origin` its own module scripts are refused, and with it a same-origin frame can lift the
+sandbox anyway.
+
 ## Configuration
 
 Both keys are optional. Left out, the sidecar keeps the defaults it uses when run standalone
@@ -72,6 +102,25 @@ may have picked it precisely so their code does not reach Anthropic.
 Switching provider disposes the live sessions of the previous one — an open conversation loses its
 in-agent context, its transcript is kept.
 
+### Safe mode and permission modes
+
+Safe mode, the default whenever `@antelopejs/dms-builder` is loaded, lets the agent change the
+project only through the Builder tools. It holds whatever permission mode is selected:
+
+- On Claude, a `PreToolUse` hook refuses `Write`, `Edit`, `MultiEdit`, `NotebookEdit` and `Bash`.
+  The CLI runs hooks before it applies the permission mode, whereas `acceptEdits` and
+  `bypassPermissions` approve those tools without consulting the permission prompt, and every
+  mode, *Normal* included, runs the shell commands the CLI deems read-only (`ls`, `wc`, `cat`,
+  `grep`, `git log`…) without asking. Reading, listing and searching stay available through
+  `Read`, `Glob` and `Grep`, allowed inside the workspace and asked outside it.
+- On Codex, the sandbox stays read-only, without network, and every escalation is declined.
+- Safe mode caps *Auto* at *Accept edits*: the sidecar stops approving prompts on its own, and the
+  Claude CLI never runs in `bypassPermissions`, so the prompts that remain (reads outside the
+  workspace, web access) still reach you.
+
+A switch between safe and vibe mode applies from the next tool call on Claude and from the next
+turn on Codex, without discarding the conversation.
+
 ### Enabling Codex
 
 1. **Install the `codex` CLI.** It is an *optional* peer dependency, so it is never installed for

package/dist/channels/bridge.d.ts

@@ -0,0 +1,22 @@
+import WebSocket from "ws";
+import { type ChannelName } from "../constants/channels";
+import type { SseStream } from "./sse-stream";
+export interface ChannelBridge {
+    id: string;
+    userId: string;
+    channel: ChannelName;
+    forward: (message: Buffer) => Promise<boolean>;
+    close: () => void;
+}
+export interface ChannelSocket {
+    channel: ChannelName;
+    socket: WebSocket;
+}
+export interface BridgeOptions {
+    userId: string;
+    sockets: readonly ChannelSocket[];
+    stream: SseStream;
+    onOpened: (bridge: ChannelBridge) => void;
+    onClosed: (bridge: ChannelBridge) => void;
+}
+export declare function openBridges(options: BridgeOptions): ChannelBridge[];

package/dist/channels/bridge.js

@@ -0,0 +1,87 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openBridges = openBridges;
+const node_crypto_1 = require("node:crypto");
+const ws_1 = __importDefault(require("ws"));
+const channels_1 = require("../constants/channels");
+const EMPTY_PAYLOAD = "{}";
+function rawDataToText(data) {
+    if (Array.isArray(data))
+        return Buffer.concat(data).toString("utf8");
+    if (Buffer.isBuffer(data))
+        return data.toString("utf8");
+    return Buffer.from(new Uint8Array(data)).toString("utf8");
+}
+function forwardTo(socket, message) {
+    if (socket.readyState !== ws_1.default.OPEN)
+        return Promise.resolve(false);
+    return new Promise((resolve) => {
+        socket.send(message, { binary: false }, (error) => resolve(!error));
+    });
+}
+function relayFrames(opened, stream) {
+    const { socket, bridge } = opened;
+    let isPaused = false;
+    socket.on("message", (data) => {
+        if (stream.send(bridge.channel, rawDataToText(data)))
+            return;
+        if (stream.isClosed() || isPaused)
+            return;
+        isPaused = true;
+        socket.pause();
+        stream.onDrain(() => {
+            isPaused = false;
+            socket.resume();
+        });
+    });
+}
+function announce(opened, stream) {
+    const connections = Object.fromEntries(opened.map(({ bridge }) => [bridge.channel, bridge.id]));
+    stream.send(channels_1.CHANNEL_EVENTS.READY, JSON.stringify({ connections }));
+}
+function openBridges(options) {
+    const { stream } = options;
+    let isOpen = true;
+    const teardown = () => {
+        if (!isOpen)
+            return;
+        isOpen = false;
+        stream.close();
+        for (const { bridge, socket } of opened) {
+            socket.close(channels_1.BRIDGE_CLOSE_CODE);
+            options.onClosed(bridge);
+        }
+    };
+    const opened = options.sockets.map(({ channel, socket }) => ({
+        socket,
+        bridge: {
+            id: (0, node_crypto_1.randomUUID)(),
+            userId: options.userId,
+            channel,
+            forward: (message) => forwardTo(socket, message),
+            close: teardown,
+        },
+    }));
+    for (const { bridge } of opened)
+        options.onOpened(bridge);
+    for (const { socket } of opened) {
+        socket.on("error", () => undefined);
+        socket.once("close", () => {
+            if (!isOpen)
+                return;
+            stream.send(channels_1.CHANNEL_EVENTS.SIDECAR_DOWN, EMPTY_PAYLOAD);
+            teardown();
+        });
+    }
+    stream.onClose(teardown);
+    for (const entry of opened)
+        relayFrames(entry, stream);
+    announce(opened, stream);
+    for (const { socket } of opened)
+        socket.resume();
+    return opened.map(({ bridge }) => bridge);
+}
+//# sourceMappingURL=bridge.js.map

package/dist/channels/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/channels/bridge.ts"],"names":[],"mappings":";;;;;AAmFA,kCAoCC;AAvHD,6CAAyC;AACzC,4CAA6C;AAC7C,oDAI+B;AAG/B,MAAM,aAAa,GAAG,IAAI,CAAC;AAgC3B,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB,EAAE,OAAe;IACnD,IAAI,MAAM,CAAC,UAAU,KAAK,YAAS,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,MAAiB;IACxD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO;QAC7D,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,QAAQ;YAAE,OAAO;QAC1C,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;YAClB,QAAQ,GAAG,KAAK,CAAC;YACjB,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,MAA6B,EAAE,MAAiB;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CACxD,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,yBAAc,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC;AASD,SAAgB,WAAW,CAAC,OAAsB;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,MAAM,GAAG,KAAK,CAAC;QACf,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,4BAAiB,CAAC,CAAC;YAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAiB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM;QACN,MAAM,EAAE;YACN,EAAE,EAAE,IAAA,wBAAU,GAAE;YAChB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO;YACP,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC;YAChD,KAAK,EAAE,QAAQ;SAChB;KACF,CAAC,CAAC,CAAC;IACJ,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM;QAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,CAAC,IAAI,CAAC,yBAAc,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YACxD,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,MAAM;QAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/channels/channel-service.d.ts

@@ -0,0 +1,5 @@
+import { HTTPResult, type RequestContext } from "@antelopejs/interface-api";
+import type WebSocket from "ws";
+export type SidecarConnector = (path: string) => Promise<WebSocket>;
+export declare function openChannel(ctx: RequestContext, channels: string, userId: string, connect?: SidecarConnector): Promise<HTTPResult | undefined>;
+export declare function postChannelMessage(connectionId: string, userId: string, message: Buffer): Promise<HTTPResult>;

package/dist/channels/channel-service.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openChannel = openChannel;
+exports.postChannelMessage = postChannelMessage;
+const interface_api_1 = require("@antelopejs/interface-api");
+const channels_1 = require("../constants/channels");
+const sidecar_1 = require("../constants/sidecar");
+const sidecar_socket_1 = require("../lifecycle/sidecar-socket");
+const bridge_1 = require("./bridge");
+const registry_1 = require("./registry");
+const sse_stream_1 = require("./sse-stream");
+const UNKNOWN_CHANNEL = { error: "unknown_channel" };
+const UNKNOWN_CONNECTION = { error: "unknown_connection" };
+const TOO_MANY_STREAMS = { error: "too_many_streams" };
+function isChannelName(value) {
+    return Object.hasOwn(channels_1.CHANNEL_SIDECAR_PATHS, value);
+}
+function parseChannels(value) {
+    const names = value.split(channels_1.CHANNEL_LIST_SEPARATOR);
+    if (new Set(names).size !== names.length)
+        return null;
+    if (!names.every(isChannelName))
+        return null;
+    return names;
+}
+async function connectAll(connect, channels) {
+    const attempts = await Promise.allSettled(channels.map((channel) => connect(channels_1.CHANNEL_SIDECAR_PATHS[channel])));
+    const sockets = attempts.flatMap((attempt, index) => attempt.status === "fulfilled"
+        ? [{ channel: channels[index], socket: attempt.value }]
+        : []);
+    if (sockets.length === channels.length)
+        return sockets;
+    for (const { socket } of sockets)
+        socket.terminate();
+    return null;
+}
+async function openChannel(ctx, channels, userId, connect = sidecar_socket_1.connectSidecarSocket) {
+    const names = parseChannels(channels);
+    if (names === null) {
+        return new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.NOT_FOUND, UNKNOWN_CHANNEL);
+    }
+    if (!(0, registry_1.reserveSockets)(userId, names.length, channels_1.CHANNEL_MAX_SOCKETS_PER_USER)) {
+        return new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.TOO_MANY_REQUESTS, TOO_MANY_STREAMS);
+    }
+    const sockets = await connectAll(connect, names).finally(() => (0, registry_1.releaseSockets)(userId, names.length));
+    if (sockets === null) {
+        return new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.SERVICE_UNAVAILABLE, sidecar_1.SIDECAR_UNAVAILABLE_BODY);
+    }
+    (0, bridge_1.openBridges)({
+        userId,
+        sockets,
+        stream: (0, sse_stream_1.openSseStream)(ctx),
+        onOpened: registry_1.trackBridge,
+        onClosed: registry_1.forgetBridge,
+    });
+    return undefined;
+}
+async function postChannelMessage(connectionId, userId, message) {
+    const bridge = (0, registry_1.findOwnedBridge)(connectionId, userId);
+    if (bridge === undefined) {
+        return new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.NOT_FOUND, UNKNOWN_CONNECTION);
+    }
+    if (!(await bridge.forward(message))) {
+        return new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.SERVICE_UNAVAILABLE, sidecar_1.SIDECAR_UNAVAILABLE_BODY);
+    }
+    return new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.ACCEPTED);
+}
+//# sourceMappingURL=channel-service.js.map

package/dist/channels/channel-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-service.js","sourceRoot":"","sources":["../../src/channels/channel-service.ts"],"names":[],"mappings":";;AA6DA,kCA8BC;AAOD,gDAgBC;AAlHD,6DAA4E;AAE5E,oDAM+B;AAC/B,kDAAgE;AAChE,gEAAmE;AACnE,qCAA2D;AAC3D,yCAMoB;AACpB,6CAA6C;AAK7C,MAAM,eAAe,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AACrD,MAAM,kBAAkB,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;AAC3D,MAAM,gBAAgB,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;AAEvD,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,gCAAqB,EAAE,KAAK,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iCAAsB,CAAC,CAAC;IAClD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,OAAyB,EACzB,QAAgC;IAEhC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CACvC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CACnE,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAClD,OAAO,CAAC,MAAM,KAAK,WAAW;QAC5B,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QACvD,CAAC,CAAC,EAAE,CACP,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IACvD,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO;QAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAOM,KAAK,UAAU,WAAW,CAC/B,GAAmB,EACnB,QAAgB,EAChB,MAAc,EACd,UAA4B,qCAAoB;IAEhD,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,0BAAU,CAAC,yBAAc,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,IAAA,yBAAc,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,uCAA4B,CAAC,EAAE,CAAC;QACxE,OAAO,IAAI,0BAAU,CAAC,yBAAc,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAC5D,IAAA,yBAAc,EAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CACrC,CAAC;IACF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,0BAAU,CACnB,yBAAc,CAAC,mBAAmB,EAClC,kCAAwB,CACzB,CAAC;IACJ,CAAC;IACD,IAAA,oBAAW,EAAC;QACV,MAAM;QACN,OAAO;QACP,MAAM,EAAE,IAAA,0BAAa,EAAC,GAAG,CAAC;QAC1B,QAAQ,EAAE,sBAAW;QACrB,QAAQ,EAAE,uBAAY;KACvB,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAOM,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,MAAc,EACd,OAAe;IAEf,MAAM,MAAM,GAAG,IAAA,0BAAe,EAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,IAAI,0BAAU,CAAC,yBAAc,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACrC,OAAO,IAAI,0BAAU,CACnB,yBAAc,CAAC,mBAAmB,EAClC,kCAAwB,CACzB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,0BAAU,CAAC,yBAAc,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC"}

package/dist/channels/message-budget.d.ts

@@ -0,0 +1,3 @@
+import { type RequestContext } from "@antelopejs/interface-api";
+export declare function reserveMessageBytes(context: RequestContext): void;
+export declare const MessageBudget: () => import("@antelopejs/interface-core/decorators").ParameterDecorator;

package/dist/channels/message-budget.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MessageBudget = void 0;
+exports.reserveMessageBytes = reserveMessageBytes;
+const interface_api_1 = require("@antelopejs/interface-api");
+const decorators_1 = require("@antelopejs/interface-core/decorators");
+const channels_1 = require("../constants/channels");
+const CONTENT_LENGTH_HEADER = "content-length";
+const TOO_MANY_MESSAGES = { error: "too_many_messages" };
+let pendingBytes = 0;
+function declaredBytes(request) {
+    const declared = Number(request.headers[CONTENT_LENGTH_HEADER]);
+    if (!Number.isFinite(declared) || declared < 0) {
+        return channels_1.CHANNEL_MESSAGE_MAX_BYTES;
+    }
+    return Math.min(declared, channels_1.CHANNEL_MESSAGE_MAX_BYTES);
+}
+function reserveMessageBytes(context) {
+    const bytes = declaredBytes(context.rawRequest);
+    if (pendingBytes + bytes > channels_1.CHANNEL_PENDING_MESSAGES_MAX_BYTES) {
+        throw new interface_api_1.HTTPResult(channels_1.CHANNEL_STATUS.TOO_MANY_REQUESTS, TOO_MANY_MESSAGES);
+    }
+    pendingBytes += bytes;
+    context.rawResponse.once("close", () => {
+        pendingBytes -= bytes;
+    });
+}
+exports.MessageBudget = (0, decorators_1.MakeParameterDecorator)((target, key, param) => (0, interface_api_1.SetParameterProvider)(target, key, param, reserveMessageBytes));
+//# sourceMappingURL=message-budget.js.map

package/dist/channels/message-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-budget.js","sourceRoot":"","sources":["../../src/channels/message-budget.ts"],"names":[],"mappings":";;;AA8BA,kDASC;AAtCD,6DAImC;AACnC,sEAA+E;AAC/E,oDAI+B;AAE/B,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;AAEzD,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,SAAS,aAAa,CAAC,OAAwB;IAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC/C,OAAO,oCAAyB,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,oCAAyB,CAAC,CAAC;AACvD,CAAC;AAMD,SAAgB,mBAAmB,CAAC,OAAuB;IACzD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,YAAY,GAAG,KAAK,GAAG,6CAAkC,EAAE,CAAC;QAC9D,MAAM,IAAI,0BAAU,CAAC,yBAAc,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC5E,CAAC;IACD,YAAY,IAAI,KAAK,CAAC;IACtB,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACrC,YAAY,IAAI,KAAK,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AAMY,QAAA,aAAa,GAAG,IAAA,mCAAsB,EAAC,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CACzE,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAC9D,CAAC"}

package/dist/channels/registry.d.ts

@@ -0,0 +1,7 @@
+import type { ChannelBridge } from "./bridge";
+export declare function reserveSockets(userId: string, count: number, limit: number): boolean;
+export declare function releaseSockets(userId: string, count: number): void;
+export declare function trackBridge(bridge: ChannelBridge): void;
+export declare function forgetBridge(bridge: ChannelBridge): void;
+export declare function findOwnedBridge(connectionId: string, userId: string): ChannelBridge | undefined;
+export declare function closeAllBridges(): void;

package/dist/channels/registry.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reserveSockets = reserveSockets;
+exports.releaseSockets = releaseSockets;
+exports.trackBridge = trackBridge;
+exports.forgetBridge = forgetBridge;
+exports.findOwnedBridge = findOwnedBridge;
+exports.closeAllBridges = closeAllBridges;
+const bridges = new Map();
+const pendingSockets = new Map();
+function openSocketsOf(userId) {
+    let count = pendingSockets.get(userId) ?? 0;
+    for (const bridge of bridges.values()) {
+        if (bridge.userId === userId)
+            count += 1;
+    }
+    return count;
+}
+function reserveSockets(userId, count, limit) {
+    if (openSocketsOf(userId) + count > limit)
+        return false;
+    pendingSockets.set(userId, (pendingSockets.get(userId) ?? 0) + count);
+    return true;
+}
+function releaseSockets(userId, count) {
+    const left = (pendingSockets.get(userId) ?? 0) - count;
+    if (left > 0)
+        pendingSockets.set(userId, left);
+    else
+        pendingSockets.delete(userId);
+}
+function trackBridge(bridge) {
+    bridges.set(bridge.id, bridge);
+}
+function forgetBridge(bridge) {
+    bridges.delete(bridge.id);
+}
+function findOwnedBridge(connectionId, userId) {
+    const bridge = bridges.get(connectionId);
+    return bridge?.userId === userId ? bridge : undefined;
+}
+function closeAllBridges() {
+    for (const bridge of bridges.values())
+        bridge.close();
+    bridges.clear();
+}
+//# sourceMappingURL=registry.js.map

package/dist/channels/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/channels/registry.ts"],"names":[],"mappings":";;AAcA,wCAQC;AAGD,wCAIC;AAED,kCAEC;AAED,oCAEC;AAGD,0CAMC;AAGD,0CAGC;AAlDD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AACjD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAGD,SAAgB,cAAc,CAC5B,MAAc,EACd,KAAa,EACb,KAAa;IAEb,IAAI,aAAa,CAAC,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK;QAAE,OAAO,KAAK,CAAC;IACxD,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,SAAgB,cAAc,CAAC,MAAc,EAAE,KAAa;IAC1D,MAAM,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;IACvD,IAAI,IAAI,GAAG,CAAC;QAAE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;;QAC1C,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,WAAW,CAAC,MAAqB;IAC/C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAgB,YAAY,CAAC,MAAqB;IAChD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAGD,SAAgB,eAAe,CAC7B,YAAoB,EACpB,MAAc;IAEd,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAGD,SAAgB,eAAe;IAC7B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACtD,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/dist/channels/sse-stream.d.ts

@@ -0,0 +1,19 @@
+import type { RequestContext } from "@antelopejs/interface-api";
+export interface SseSink {
+    write(chunk: string): boolean;
+    end(): void;
+    once(event: "drain", listener: () => void): unknown;
+}
+export interface SseSource {
+    sink: SseSink;
+    onClientGone: (listener: () => void) => void;
+}
+export interface SseStream {
+    send: (eventName: string, data: string) => boolean;
+    onDrain: (listener: () => void) => void;
+    onClose: (listener: () => void) => void;
+    close: () => void;
+    isClosed: () => boolean;
+}
+export declare function createSseStream(source: SseSource): SseStream;
+export declare function openSseStream(ctx: RequestContext): SseStream;

package/dist/channels/sse-stream.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSseStream = createSseStream;
+exports.openSseStream = openSseStream;
+const channels_1 = require("../constants/channels");
+const LINE_BREAK = /\r\n|\r|\n/;
+function formatEvent(eventName, data) {
+    const lines = data.split(LINE_BREAK).map((line) => `data: ${line}`);
+    return `event: ${eventName}\n${lines.join("\n")}\n\n`;
+}
+function createSseStream(source) {
+    const closeListeners = [];
+    let isClosed = false;
+    const keepalive = setInterval(() => {
+        source.sink.write(channels_1.SSE_KEEPALIVE_FRAME);
+    }, channels_1.SSE_KEEPALIVE_INTERVAL_MS);
+    keepalive.unref();
+    const finish = () => {
+        if (isClosed)
+            return;
+        isClosed = true;
+        clearInterval(keepalive);
+        for (const listener of closeListeners)
+            listener();
+    };
+    source.onClientGone(finish);
+    return {
+        send: (eventName, data) => !isClosed && source.sink.write(formatEvent(eventName, data)),
+        onDrain: (listener) => source.sink.once("drain", listener),
+        onClose: (listener) => {
+            if (isClosed)
+                listener();
+            else
+                closeListeners.push(listener);
+        },
+        close: () => {
+            if (isClosed)
+                return;
+            finish();
+            source.sink.end();
+        },
+        isClosed: () => isClosed,
+    };
+}
+function openSseStream(ctx) {
+    for (const [name, value] of Object.entries(channels_1.SSE_HEADERS)) {
+        ctx.response.addHeader(name, value);
+    }
+    return createSseStream({
+        sink: ctx.response.getWriteStream(channels_1.SSE_CONTENT_TYPE, channels_1.SSE_OK_STATUS),
+        onClientGone: (listener) => {
+            if (ctx.rawResponse.closed)
+                listener();
+            else
+                ctx.rawResponse.once("close", listener);
+        },
+    });
+}
+//# sourceMappingURL=sse-stream.js.map

package/dist/channels/sse-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-stream.js","sourceRoot":"","sources":["../../src/channels/sse-stream.ts"],"names":[],"mappings":";;AAwCA,0CA6BC;AAOD,sCAWC;AAtFD,oDAM+B;AAE/B,MAAM,UAAU,GAAG,YAAY,CAAC;AAyBhC,SAAS,WAAW,CAAC,SAAiB,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACpE,OAAO,UAAU,SAAS,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;AACxD,CAAC;AAGD,SAAgB,eAAe,CAAC,MAAiB;IAC/C,MAAM,cAAc,GAAsB,EAAE,CAAC;IAC7C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;QACjC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,8BAAmB,CAAC,CAAC;IACzC,CAAC,EAAE,oCAAyB,CAAC,CAAC;IAC9B,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,aAAa,CAAC,SAAS,CAAC,CAAC;QACzB,KAAK,MAAM,QAAQ,IAAI,cAAc;YAAE,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5B,OAAO;QACL,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,CACxB,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC1D,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;YACpB,IAAI,QAAQ;gBAAE,QAAQ,EAAE,CAAC;;gBACpB,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,EAAE,CAAC;YACT,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAOD,SAAgB,aAAa,CAAC,GAAmB;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAW,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,2BAAgB,EAAE,wBAAa,CAAC;QAClE,YAAY,EAAE,CAAC,QAAQ,EAAE,EAAE;YACzB,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM;gBAAE,QAAQ,EAAE,CAAC;;gBAClC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/chatbox/passthrough.d.ts

@@ -0,0 +1,3 @@
+import { HTTPResult, type RequestContext } from "@antelopejs/interface-api";
+export type ChatboxLoader = (path: string) => Promise<Response>;
+export declare function relayChatboxFile(ctx: RequestContext, path: string, load?: ChatboxLoader): Promise<HTTPResult | undefined>;

package/dist/chatbox/passthrough.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.relayChatboxFile = relayChatboxFile;
+const node_stream_1 = require("node:stream");
+const promises_1 = require("node:stream/promises");
+const interface_api_1 = require("@antelopejs/interface-api");
+const chatbox_1 = require("../constants/chatbox");
+const sidecar_1 = require("../constants/sidecar");
+const sidecar_unavailable_error_1 = require("../lifecycle/sidecar-unavailable-error");
+const spawn_sidecar_1 = require("../lifecycle/spawn-sidecar");
+async function loadFromSidecar(path) {
+    await (0, spawn_sidecar_1.ensureSidecarRunning)();
+    const port = (0, spawn_sidecar_1.getSidecarPort)();
+    if (port === null)
+        throw new sidecar_unavailable_error_1.SidecarUnavailableError();
+    return fetch(`http://${sidecar_1.SIDECAR_LOOPBACK_HOST}:${port}${path}`);
+}
+async function tryLoad(load, path) {
+    try {
+        return await load(path);
+    }
+    catch {
+        return null;
+    }
+}
+function applyHeaders(ctx, upstream) {
+    for (const [name, value] of Object.entries(chatbox_1.CHATBOX_RESPONSE_HEADERS)) {
+        ctx.response.addHeader(name, value);
+    }
+    for (const name of chatbox_1.CHATBOX_RELAYED_HEADERS) {
+        const value = upstream.headers.get(name);
+        if (value !== null)
+            ctx.response.addHeader(name, value);
+    }
+}
+async function relayChatboxFile(ctx, path, load = loadFromSidecar) {
+    const upstream = await tryLoad(load, path);
+    if (upstream === null) {
+        return new interface_api_1.HTTPResult(sidecar_1.SIDECAR_UNAVAILABLE_STATUS, sidecar_1.SIDECAR_UNAVAILABLE_BODY);
+    }
+    applyHeaders(ctx, upstream);
+    const contentType = upstream.headers.get(chatbox_1.CHATBOX_CONTENT_TYPE_HEADER) ??
+        chatbox_1.CHATBOX_DEFAULT_CONTENT_TYPE;
+    const sink = ctx.response.getWriteStream(contentType, upstream.status);
+    if (upstream.body === null) {
+        sink.end();
+        return undefined;
+    }
+    const body = node_stream_1.Readable.fromWeb(upstream.body);
+    void (0, promises_1.pipeline)(body, sink).catch(() => sink.destroy());
+    return undefined;
+}
+//# sourceMappingURL=passthrough.js.map

package/dist/chatbox/passthrough.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passthrough.js","sourceRoot":"","sources":["../../src/chatbox/passthrough.ts"],"names":[],"mappings":";;AAyDA,4CAqBC;AA9ED,6CAAuC;AACvC,mDAAgD;AAEhD,6DAA4E;AAC5E,kDAK8B;AAC9B,kDAI8B;AAC9B,sFAAiF;AACjF,8DAGoC;AAKpC,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,IAAA,oCAAoB,GAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAA,8BAAc,GAAE,CAAC;IAC9B,IAAI,IAAI,KAAK,IAAI;QAAE,MAAM,IAAI,mDAAuB,EAAE,CAAC;IACvD,OAAO,KAAK,CAAC,UAAU,+BAAqB,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,IAAmB,EACnB,IAAY;IAEZ,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAmB,EAAE,QAAkB;IAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kCAAwB,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,iCAAuB,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,IAAI;YAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAOM,KAAK,UAAU,gBAAgB,CACpC,GAAmB,EACnB,IAAY,EACZ,OAAsB,eAAe;IAErC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,0BAAU,CAAC,oCAA0B,EAAE,kCAAwB,CAAC,CAAC;IAC9E,CAAC;IACD,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC5B,MAAM,WAAW,GACf,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qCAA2B,CAAC;QACjD,sCAA4B,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,sBAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAqC,CAAC,CAAC;IAC9E,KAAK,IAAA,mBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACtD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/constants/channels.d.ts

@@ -0,0 +1,30 @@
+export declare const CHANNELS_ROUTE_PREFIX = "/ai/channels";
+export declare const CHANNEL_EVENTS_ROUTE = "/:channels/events";
+export declare const CHANNEL_MESSAGES_ROUTE = "/:connectionId/messages";
+export declare const CHANNELS_PARAM = "channels";
+export declare const CONNECTION_ID_PARAM = "connectionId";
+export declare const CHANNEL_LIST_SEPARATOR = ",";
+export declare const CHANNEL_SIDECAR_PATHS: {
+    readonly host: "/ws/host";
+    readonly chat: "/ws/iframe";
+};
+export type ChannelName = keyof typeof CHANNEL_SIDECAR_PATHS;
+export declare const CHANNEL_EVENTS: {
+    readonly READY: "ready";
+    readonly SIDECAR_DOWN: "sidecar_down";
+};
+export declare const SSE_CONTENT_TYPE = "text/event-stream";
+export declare const SSE_OK_STATUS = 200;
+export declare const SSE_KEEPALIVE_INTERVAL_MS = 15000;
+export declare const SSE_KEEPALIVE_FRAME = ": keepalive\n\n";
+export declare const SSE_HEADERS: Readonly<Record<string, string>>;
+export declare const CHANNEL_MESSAGE_MAX_BYTES: number;
+export declare const CHANNEL_MAX_SOCKETS_PER_USER = 16;
+export declare const CHANNEL_PENDING_MESSAGES_MAX_BYTES: number;
+export declare const CHANNEL_STATUS: {
+    readonly ACCEPTED: 204;
+    readonly NOT_FOUND: 404;
+    readonly TOO_MANY_REQUESTS: 429;
+    readonly SERVICE_UNAVAILABLE: 503;
+};
+export declare const BRIDGE_CLOSE_CODE = 1001;

package/dist/constants/channels.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BRIDGE_CLOSE_CODE = exports.CHANNEL_STATUS = exports.CHANNEL_PENDING_MESSAGES_MAX_BYTES = exports.CHANNEL_MAX_SOCKETS_PER_USER = exports.CHANNEL_MESSAGE_MAX_BYTES = exports.SSE_HEADERS = exports.SSE_KEEPALIVE_FRAME = exports.SSE_KEEPALIVE_INTERVAL_MS = exports.SSE_OK_STATUS = exports.SSE_CONTENT_TYPE = exports.CHANNEL_EVENTS = exports.CHANNEL_SIDECAR_PATHS = exports.CHANNEL_LIST_SEPARATOR = exports.CONNECTION_ID_PARAM = exports.CHANNELS_PARAM = exports.CHANNEL_MESSAGES_ROUTE = exports.CHANNEL_EVENTS_ROUTE = exports.CHANNELS_ROUTE_PREFIX = void 0;
+const sidecar_1 = require("./sidecar");
+exports.CHANNELS_ROUTE_PREFIX = "/ai/channels";
+exports.CHANNEL_EVENTS_ROUTE = "/:channels/events";
+exports.CHANNEL_MESSAGES_ROUTE = "/:connectionId/messages";
+exports.CHANNELS_PARAM = "channels";
+exports.CONNECTION_ID_PARAM = "connectionId";
+exports.CHANNEL_LIST_SEPARATOR = ",";
+exports.CHANNEL_SIDECAR_PATHS = {
+    host: "/ws/host",
+    chat: "/ws/iframe",
+};
+exports.CHANNEL_EVENTS = {
+    READY: "ready",
+    SIDECAR_DOWN: "sidecar_down",
+};
+exports.SSE_CONTENT_TYPE = "text/event-stream";
+exports.SSE_OK_STATUS = 200;
+exports.SSE_KEEPALIVE_INTERVAL_MS = 15_000;
+exports.SSE_KEEPALIVE_FRAME = ": keepalive\n\n";
+exports.SSE_HEADERS = {
+    "Cache-Control": "no-store, no-transform",
+    "X-Accel-Buffering": "no",
+    Connection: "keep-alive",
+};
+exports.CHANNEL_MESSAGE_MAX_BYTES = 384 * 1024 * 1024;
+exports.CHANNEL_MAX_SOCKETS_PER_USER = 16;
+exports.CHANNEL_PENDING_MESSAGES_MAX_BYTES = 2 * exports.CHANNEL_MESSAGE_MAX_BYTES;
+exports.CHANNEL_STATUS = {
+    ACCEPTED: 204,
+    NOT_FOUND: 404,
+    TOO_MANY_REQUESTS: 429,
+    SERVICE_UNAVAILABLE: sidecar_1.SIDECAR_UNAVAILABLE_STATUS,
+};
+exports.BRIDGE_CLOSE_CODE = 1001;
+//# sourceMappingURL=channels.js.map

package/dist/constants/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../src/constants/channels.ts"],"names":[],"mappings":";;;AAAA,uCAAuD;AAG1C,QAAA,qBAAqB,GAAG,cAAc,CAAC;AACvC,QAAA,oBAAoB,GAAG,mBAAmB,CAAC;AAC3C,QAAA,sBAAsB,GAAG,yBAAyB,CAAC;AACnD,QAAA,cAAc,GAAG,UAAU,CAAC;AAC5B,QAAA,mBAAmB,GAAG,cAAc,CAAC;AAOrC,QAAA,sBAAsB,GAAG,GAAG,CAAC;AAM7B,QAAA,qBAAqB,GAAG;IACnC,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,YAAY;CACV,CAAC;AAIE,QAAA,cAAc,GAAG;IAC5B,KAAK,EAAE,OAAO;IACd,YAAY,EAAE,cAAc;CACpB,CAAC;AAEE,QAAA,gBAAgB,GAAG,mBAAmB,CAAC;AACvC,QAAA,aAAa,GAAG,GAAG,CAAC;AACpB,QAAA,yBAAyB,GAAG,MAAM,CAAC;AACnC,QAAA,mBAAmB,GAAG,iBAAiB,CAAC;AACxC,QAAA,WAAW,GAAqC;IAC3D,eAAe,EAAE,wBAAwB;IACzC,mBAAmB,EAAE,IAAI;IACzB,UAAU,EAAE,YAAY;CACzB,CAAC;AAOW,QAAA,yBAAyB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAG9C,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAOlC,QAAA,kCAAkC,GAAG,CAAC,GAAG,iCAAyB,CAAC;AAEnE,QAAA,cAAc,GAAG;IAC5B,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;IACd,iBAAiB,EAAE,GAAG;IACtB,mBAAmB,EAAE,oCAA0B;CACvC,CAAC;AAGE,QAAA,iBAAiB,GAAG,IAAI,CAAC"}

package/dist/constants/chatbox.d.ts

@@ -0,0 +1,10 @@
+export declare const CHATBOX_ROUTE_PREFIX = "/api/ai/chatbox";
+export declare const CHATBOX_INDEX_ROUTE = "/";
+export declare const CHATBOX_ASSET_ROUTE = "::path";
+export declare const CHATBOX_PATH_PARAM = "path";
+export declare const CHATBOX_INDEX_PATH = "/";
+export declare const CHATBOX_DEFAULT_CONTENT_TYPE = "application/octet-stream";
+export declare const CHATBOX_CONTENT_TYPE_HEADER = "content-type";
+export declare const CHATBOX_RELAYED_HEADERS: readonly ["content-length"];
+export declare const CHATBOX_CONTENT_SECURITY_POLICY: string;
+export declare const CHATBOX_RESPONSE_HEADERS: Readonly<Record<string, string>>;

package/dist/constants/chatbox.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CHATBOX_RESPONSE_HEADERS = exports.CHATBOX_CONTENT_SECURITY_POLICY = exports.CHATBOX_RELAYED_HEADERS = exports.CHATBOX_CONTENT_TYPE_HEADER = exports.CHATBOX_DEFAULT_CONTENT_TYPE = exports.CHATBOX_INDEX_PATH = exports.CHATBOX_PATH_PARAM = exports.CHATBOX_ASSET_ROUTE = exports.CHATBOX_INDEX_ROUTE = exports.CHATBOX_ROUTE_PREFIX = void 0;
+exports.CHATBOX_ROUTE_PREFIX = "/api/ai/chatbox";
+exports.CHATBOX_INDEX_ROUTE = "/";
+exports.CHATBOX_ASSET_ROUTE = "::path";
+exports.CHATBOX_PATH_PARAM = "path";
+exports.CHATBOX_INDEX_PATH = "/";
+exports.CHATBOX_DEFAULT_CONTENT_TYPE = "application/octet-stream";
+exports.CHATBOX_CONTENT_TYPE_HEADER = "content-type";
+exports.CHATBOX_RELAYED_HEADERS = ["content-length"];
+const ICONIFY_API_ORIGINS = [
+    "https://api.iconify.design",
+    "https://api.simplesvg.com",
+    "https://api.unisvg.com",
+];
+exports.CHATBOX_CONTENT_SECURITY_POLICY = [
+    "default-src 'self'",
+    "script-src 'self'",
+    "style-src 'self' 'unsafe-inline'",
+    "img-src 'self' data: blob:",
+    "font-src 'self' data:",
+    `connect-src 'self' ${ICONIFY_API_ORIGINS.join(" ")}`,
+    "frame-ancestors 'self'",
+    "base-uri 'self'",
+    "form-action 'none'",
+    "object-src 'none'",
+].join("; ");
+exports.CHATBOX_RESPONSE_HEADERS = {
+    "Content-Security-Policy": exports.CHATBOX_CONTENT_SECURITY_POLICY,
+    "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "same-origin",
+    "Cache-Control": "no-cache",
+};
+//# sourceMappingURL=chatbox.js.map

package/dist/constants/chatbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatbox.js","sourceRoot":"","sources":["../../src/constants/chatbox.ts"],"names":[],"mappings":";;;AAIa,QAAA,oBAAoB,GAAG,iBAAiB,CAAC;AACzC,QAAA,mBAAmB,GAAG,GAAG,CAAC;AAC1B,QAAA,mBAAmB,GAAG,QAAQ,CAAC;AAC/B,QAAA,kBAAkB,GAAG,MAAM,CAAC;AAC5B,QAAA,kBAAkB,GAAG,GAAG,CAAC;AACzB,QAAA,4BAA4B,GAAG,0BAA0B,CAAC;AAC1D,QAAA,2BAA2B,GAAG,cAAc,CAAC;AAG7C,QAAA,uBAAuB,GAAG,CAAC,gBAAgB,CAAU,CAAC;AAEnE,MAAM,mBAAmB,GAAG;IAC1B,4BAA4B;IAC5B,2BAA2B;IAC3B,wBAAwB;CACzB,CAAC;AAUW,QAAA,+BAA+B,GAAG;IAC7C,oBAAoB;IACpB,mBAAmB;IACnB,kCAAkC;IAClC,4BAA4B;IAC5B,uBAAuB;IACvB,sBAAsB,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;IACrD,wBAAwB;IACxB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;CACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEA,QAAA,wBAAwB,GAAqC;IACxE,yBAAyB,EAAE,uCAA+B;IAC1D,wBAAwB,EAAE,SAAS;IACnC,iBAAiB,EAAE,aAAa;IAChC,eAAe,EAAE,UAAU;CAC5B,CAAC"}