@aquaclawai/aquarium 1.0.0

package/dist/routes/ui-proxy.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=ui-proxy.d.ts.map

package/dist/routes/ui-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-proxy.d.ts","sourceRoot":"","sources":["../../src/routes/ui-proxy.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,MAAM,4CAAW,CAAC;AAkGxB,eAAe,MAAM,CAAC"}

package/dist/routes/ui-proxy.js

@@ -0,0 +1,90 @@
+import { Router } from 'express';
+import http from 'http';
+import https from 'https';
+import { requireAuth } from '../middleware/auth.js';
+import { getInstance } from '../services/instance-manager.js';
+const router = Router();
+router.use(requireAuth);
+router.all('/:id/proxy/*', async (req, res) => {
+    try {
+        const instance = await getInstance(req.params.id, req.auth.userId);
+        if (!instance) {
+            res.status(403).json({ ok: false, error: 'Access denied' });
+            return;
+        }
+        if (instance.status !== 'running' || !instance.controlEndpoint) {
+            res.status(409).json({ ok: false, error: 'Instance not running' });
+            return;
+        }
+        const httpBase = instance.controlEndpoint
+            .replace('ws://', 'http://')
+            .replace('wss://', 'https://');
+        // req.params[0] is the wildcard capture after /:id/proxy/
+        const params = req.params;
+        const rawSubPathValue = params[0] ?? '';
+        const rawSubPath = Array.isArray(rawSubPathValue) ? rawSubPathValue.join('/') : rawSubPathValue;
+        const subPath = rawSubPath.startsWith('/') ? rawSubPath : `/${rawSubPath}`;
+        const queryString = req.url.includes('?') ? req.url.slice(req.url.indexOf('?')) : '';
+        const targetUrl = `${httpBase}${subPath}${queryString}`;
+        // Build forwarded headers
+        const forwardedHeaders = {};
+        for (const [key, val] of Object.entries(req.headers)) {
+            if (val !== undefined) {
+                forwardedHeaders[key] = val;
+            }
+        }
+        delete forwardedHeaders['host'];
+        delete forwardedHeaders['content-length']; // may be stale after encoding changes
+        forwardedHeaders['authorization'] = `Bearer ${instance.authToken}`;
+        forwardedHeaders['x-forwarded-for'] = req.ip ?? '';
+        forwardedHeaders['x-forwarded-proto'] = req.protocol;
+        forwardedHeaders['x-forwarded-host'] = req.hostname;
+        const parsedUrl = new URL(targetUrl);
+        const transport = parsedUrl.protocol === 'https:' ? https : http;
+        const proxyReq = transport.request(targetUrl, {
+            method: req.method,
+            headers: forwardedHeaders,
+        }, (proxyRes) => {
+            res.status(proxyRes.statusCode ?? 502);
+            // Copy headers, strip security headers that block iframes
+            const STRIP_HEADERS = new Set([
+                'transfer-encoding',
+                'x-frame-options',
+            ]);
+            for (const [key, val] of Object.entries(proxyRes.headers)) {
+                const lk = key.toLowerCase();
+                if (STRIP_HEADERS.has(lk))
+                    continue;
+                if (lk === 'content-security-policy' && typeof val === 'string') {
+                    // Remove frame-ancestors directive so the gateway UI can be iframed
+                    const cleaned = val
+                        .split(';')
+                        .map(d => d.trim())
+                        .filter(d => !d.toLowerCase().startsWith('frame-ancestors'))
+                        .join('; ');
+                    res.setHeader(key, cleaned);
+                    continue;
+                }
+                if (val !== undefined) {
+                    res.setHeader(key, val);
+                }
+            }
+            proxyRes.pipe(res);
+        });
+        proxyReq.on('error', (_err) => {
+            if (!res.headersSent) {
+                res.status(502).json({ ok: false, error: 'Gateway unreachable' });
+            }
+        });
+        // Pipe request body for POST/PUT/PATCH
+        req.pipe(proxyReq);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (!res.headersSent) {
+            res.status(500).json({ ok: false, error: message });
+        }
+    }
+});
+export default router;
+//# sourceMappingURL=ui-proxy.js.map

package/dist/routes/ui-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-proxy.js","sourceRoot":"","sources":["../../src/routes/ui-proxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAG9D,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AACxB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAExB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAwB,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC/D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAwB,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe;aACtC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;aAC3B,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEjC,0DAA0D;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAsD,CAAC;QAC1E,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAChG,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;QAE3E,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,SAAS,GAAG,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,EAAE,CAAC;QAExD,0BAA0B;QAC1B,MAAM,gBAAgB,GAAsC,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,gBAAgB,CAAC,GAAG,CAAC,GAAG,GAAwB,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,gBAAgB,CAAC,gBAAgB,CAAC,CAAC,CAAC,sCAAsC;QACjF,gBAAgB,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,CAAC,SAAS,EAAE,CAAC;QACnE,gBAAgB,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;QACnD,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACrD,gBAAgB,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QAEpD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAEjE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAChC,SAAS,EACT;YACE,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,gBAAgB;SAC1B,EACD,CAAC,QAAQ,EAAE,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;YAEvC,0DAA0D;YAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;gBAC5B,mBAAmB;gBACnB,iBAAiB;aAClB,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC7B,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;oBAAE,SAAS;gBACpC,IAAI,EAAE,KAAK,yBAAyB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBAChE,oEAAoE;oBACpE,MAAM,OAAO,GAAG,GAAG;yBAChB,KAAK,CAAC,GAAG,CAAC;yBACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;yBAClB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;yBAC3D,IAAI,CAAC,IAAI,CAAC,CAAC;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC5B,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAwB,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CACF,CAAC;QAEF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAwB,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,uCAAuC;QACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/routes/user-credentials.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=user-credentials.d.ts.map

package/dist/routes/user-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-credentials.d.ts","sourceRoot":"","sources":["../../src/routes/user-credentials.ts"],"names":[],"mappings":"AAiBA,QAAA,MAAM,MAAM,4CAAW,CAAC;AAgGxB,eAAe,MAAM,CAAC"}

package/dist/routes/user-credentials.js

@@ -0,0 +1,85 @@
+import { Router } from 'express';
+import { requireAuth } from '../middleware/auth.js';
+import { listUserCredentials, addUserCredential, updateUserCredential, deleteUserCredential, updateCredentialStatus, } from '../services/user-credential-store.js';
+const router = Router();
+router.use(requireAuth);
+// GET / — list user credentials (extended with role/status/maskedValue)
+router.get('/', async (req, res) => {
+    try {
+        const credentials = await listUserCredentials(req.auth.userId);
+        res.json({ ok: true, data: credentials });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        res.status(500).json({ ok: false, error: message });
+    }
+});
+// POST / — add a credential to the user vault
+router.post('/', async (req, res) => {
+    try {
+        const body = req.body;
+        if (!body.provider || !body.credentialType || !body.value) {
+            res.status(400).json({ ok: false, error: 'Missing provider, credentialType, or value' });
+            return;
+        }
+        const credential = await addUserCredential(req.auth.userId, body.provider, body.credentialType, body.value, body.displayName, body.metadata, { source: 'api', ipAddress: req.ip ?? null });
+        res.status(201).json({ ok: true, data: credential });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        res.status(500).json({ ok: false, error: message });
+    }
+});
+// PUT /:id — update a credential
+router.put('/:id', async (req, res) => {
+    try {
+        const body = req.body;
+        const credential = await updateUserCredential(req.params.id, req.auth.userId, body, { source: 'api', ipAddress: req.ip ?? null });
+        if (!credential) {
+            res.status(404).json({ ok: false, error: 'Credential not found' });
+            return;
+        }
+        res.json({ ok: true, data: credential });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        res.status(500).json({ ok: false, error: message });
+    }
+});
+// PUT /:id/status — toggle credential active/disabled
+router.put('/:id/status', async (req, res) => {
+    try {
+        const { status } = req.body;
+        if (!status || !['active', 'disabled'].includes(status)) {
+            res.status(400).json({ ok: false, error: 'Invalid status. Must be "active" or "disabled".' });
+            return;
+        }
+        const credential = await updateCredentialStatus(req.params.id, req.auth.userId, status, { source: 'api', ipAddress: req.ip ?? null });
+        if (!credential) {
+            res.status(404).json({ ok: false, error: 'Credential not found' });
+            return;
+        }
+        res.json({ ok: true, data: credential });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        res.status(500).json({ ok: false, error: message });
+    }
+});
+// DELETE /:id — delete a credential
+router.delete('/:id', async (req, res) => {
+    try {
+        const deleted = await deleteUserCredential(req.params.id, req.auth.userId, { source: 'api', ipAddress: req.ip ?? null });
+        if (!deleted) {
+            res.status(404).json({ ok: false, error: 'Credential not found' });
+            return;
+        }
+        res.json({ ok: true });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        res.status(500).json({ ok: false, error: message });
+    }
+});
+export default router;
+//# sourceMappingURL=user-credentials.js.map

package/dist/routes/user-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-credentials.js","sourceRoot":"","sources":["../../src/routes/user-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,sCAAsC,CAAC;AAS9C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AACxB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAExB,wEAAwE;AACxE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACjC,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAkD,CAAC,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,8CAA8C;AAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAgC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,EAAwB,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CACxC,GAAG,CAAC,IAAK,CAAC,MAAM,EAChB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,QAAQ,EACb,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAC7C,CAAC;QACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAgD,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,iCAAiC;AACjC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAmC,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACnI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAwB,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAgD,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC3C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAoC,CAAC;QAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAwB,CAAC,CAAC;YACpH,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAC7C,GAAG,CAAC,MAAM,CAAC,EAAE,EACb,GAAG,CAAC,IAAK,CAAC,MAAM,EAChB,MAAM,EACN,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAC7C,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAwB,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAgD,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1H,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAwB,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAwB,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/routes/users.d.ts

@@ -0,0 +1,3 @@
+declare const router: import("express-serve-static-core").Router;
+export default router;
+//# sourceMappingURL=users.d.ts.map

package/dist/routes/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAKA,QAAA,MAAM,MAAM,4CAAW,CAAC;AA8BxB,eAAe,MAAM,CAAC"}

package/dist/routes/users.js

@@ -0,0 +1,30 @@
+import { Router } from 'express';
+import { db } from '../db/index.js';
+import { requireAuth } from '../middleware/auth.js';
+const router = Router();
+router.get('/search', requireAuth, async (req, res) => {
+    try {
+        const email = typeof req.query.email === 'string' ? req.query.email.trim().toLowerCase() : '';
+        if (!email || email.length < 3) {
+            res.status(400).json({ ok: false, error: 'Email query must be at least 3 characters' });
+            return;
+        }
+        const rows = await db('users')
+            .whereRaw('LOWER(email) LIKE ?', [`%${email}%`])
+            .where('id', '!=', req.auth.userId)
+            .select('id', 'email', 'display_name')
+            .limit(10);
+        const results = rows.map((row) => ({
+            id: row.id,
+            email: row.email,
+            displayName: row.display_name,
+        }));
+        res.json({ ok: true, data: results });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        res.status(500).json({ ok: false, error: message });
+    }
+});
+export default router;
+//# sourceMappingURL=users.js.map

package/dist/routes/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAGpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;AAExB,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9F,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2CAA2C,EAAwB,CAAC,CAAC;YAC9G,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;aAC3B,QAAQ,CAAC,qBAAqB,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;aAC/C,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAK,CAAC,MAAM,CAAC;aACnC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC;aACrC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEb,MAAM,OAAO,GAAuB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAwD,EAAE,EAAE,CAAC,CAAC;YAC1G,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,YAAY;SAC9B,CAAC,CAAC,CAAC;QAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAA4C,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/runtime/docker.d.ts

@@ -0,0 +1,37 @@
+import type { Readable } from 'stream';
+import type { RuntimeEngine, InstanceSpec, StartResult, RuntimeStatus, ExecResult, ExecOptions } from './types.js';
+export declare class DockerEngine implements RuntimeEngine {
+    readonly name: "docker";
+    private docker;
+    private usedPorts;
+    constructor();
+    isAvailable(): Promise<boolean>;
+    private allocatePort;
+    private parseMemory;
+    private parseCpu;
+    private initVolumePermissions;
+    private instanceNetworkName;
+    private createInstanceNetwork;
+    private connectPlatformContainer;
+    private connectLiteLLMContainer;
+    ensureLiteLLMConnected(instanceId: string): Promise<void>;
+    cleanupOrphanNetworks(): Promise<void>;
+    private cleanupInstanceNetworks;
+    start(spec: InstanceSpec): Promise<StartResult>;
+    stop(runtimeId: string): Promise<void>;
+    restart(spec: InstanceSpec, runtimeId: string): Promise<StartResult>;
+    delete(runtimeId: string): Promise<void>;
+    purge(runtimeId: string): Promise<void>;
+    getStatus(runtimeId: string): Promise<RuntimeStatus>;
+    streamLogs(runtimeId: string, options?: {
+        follow?: boolean;
+        tailLines?: number;
+        timestamps?: boolean;
+    }): Promise<Readable>;
+    listFiles(runtimeId: string, dirPath: string): Promise<string[]>;
+    readFile(runtimeId: string, filePath: string): Promise<string | null>;
+    private demuxStdout;
+    writeFiles(runtimeId: string, basePath: string, files: Map<string, string>): Promise<void>;
+    exec(runtimeId: string, command: string[], options?: ExecOptions): Promise<ExecResult>;
+}
+//# sourceMappingURL=docker.d.ts.map

package/dist/runtime/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../src/runtime/docker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGnH,qBAAa,YAAa,YAAW,aAAa;IAChD,QAAQ,CAAC,IAAI,EAAG,QAAQ,CAAU;IAClC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,SAAS,CAAqB;;IAMhC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;YASvB,YAAY;IAkB1B,OAAO,CAAC,WAAW;IAenB,OAAO,CAAC,QAAQ;YAOF,qBAAqB;IAmBnC,OAAO,CAAC,mBAAmB;YAIb,qBAAqB;YA+BrB,wBAAwB;YAYxB,uBAAuB;IAY/B,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKzD,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;YA2C9B,uBAAuB;IA4B/B,KAAK,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC;IAyI/C,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBtC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAMpE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBxC,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BvC,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAoBpD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+B1H,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA4BhE,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAyB3E,OAAO,CAAC,WAAW;IAmBb,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuC1F,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAuC7F"}