@atelierai/uco 1.0.0

package/dist/server/rest/router.js

@@ -0,0 +1,158 @@
+/**
+ * REST router — assembles all 16 route handlers into a single http.RequestListener.
+ *
+ * Path matching is explicit (no framework). Routes are checked in order of
+ * specificity (more specific paths before less specific ones).
+ */
+import { URL } from 'node:url';
+import { handleListTools, handleCallTool } from './tools.js';
+import { handleListCalls, handleGetCall } from './calls.js';
+import { handleListSystemTools, handleCallSystemTool } from './system-tools.js';
+import { handleListPrompts, handleGetPrompt } from './prompts.js';
+import { handleListResources, handleResourceContent, handleResourceTemplates } from './resources.js';
+import { handleGetSession, handleEnableTools, handleDisableAllTools, handleListSessions, } from './session.js';
+import { handleSetInstance, handleClearInstance, handleListInstances } from './instances.js';
+import { handleHelp } from './help.js';
+import { handleLocalHealth, handleReadinessHealth } from './health.js';
+import { sendError } from './context.js';
+import { hasForbiddenOrigin } from '../origin.js';
+/** Create the HTTP request listener that routes to all handlers. */
+export function createRestRouter(ctx) {
+    return async (req, res) => {
+        const url = new URL(req.url ?? '', 'http://localhost');
+        const path = url.pathname;
+        const method = req.method ?? 'GET';
+        try {
+            // This guard intentionally precedes public-route dispatch and bearer
+            // authentication so browser requests cannot probe either surface.
+            if (hasForbiddenOrigin(req)) {
+                sendError(res, 403, 'forbidden-origin', 'Browser Origin requests are not allowed.', false);
+                return;
+            }
+            // A handed-off listener is deliberately not a normal tool server until
+            // its parent has durably published commit intent and committed this exact
+            // instance over the same IPC channel.
+            if (ctx.ownedRuntime?.phase === 'precommit' &&
+                !(path === '/api/health' && method === 'GET')) {
+                sendError(res, 503, 'owned-server-precommit', 'The uco-owned server is awaiting handoff commit.', true);
+                return;
+            }
+            // GET /help — no auth required.
+            if (path === '/help' && method === 'GET') {
+                handleHelp(req, res);
+                return;
+            }
+            if (path === '/health' && method === 'GET') {
+                handleLocalHealth(req, res);
+                return;
+            }
+            if (path === '/api/health' && method === 'GET') {
+                handleReadinessHealth(req, res, ctx);
+                return;
+            }
+            // GET /api/tools
+            if (path === '/api/tools' && method === 'GET') {
+                await handleListTools(req, res, ctx);
+                return;
+            }
+            // POST /api/tools/{name}
+            if (path.startsWith('/api/tools/') && method === 'POST') {
+                const name = decodeURIComponent(path.slice('/api/tools/'.length));
+                await handleCallTool(req, res, ctx, name);
+                return;
+            }
+            // GET /api/calls/{callId} (before the /api/calls collection)
+            if (path.startsWith('/api/calls/') && method === 'GET') {
+                const callId = path.slice('/api/calls/'.length);
+                await handleGetCall(req, res, ctx, callId);
+                return;
+            }
+            // GET /api/calls
+            if (path === '/api/calls' && method === 'GET') {
+                await handleListCalls(req, res, ctx);
+                return;
+            }
+            // GET /api/system-tools
+            if (path === '/api/system-tools' && method === 'GET') {
+                await handleListSystemTools(req, res, ctx);
+                return;
+            }
+            // POST /api/system-tools/{name}
+            if (path.startsWith('/api/system-tools/') && method === 'POST') {
+                const name = decodeURIComponent(path.slice('/api/system-tools/'.length));
+                await handleCallSystemTool(req, res, ctx, name);
+                return;
+            }
+            // GET /api/prompts
+            if (path === '/api/prompts' && method === 'GET') {
+                await handleListPrompts(req, res, ctx);
+                return;
+            }
+            // POST /api/prompts/{name}
+            if (path.startsWith('/api/prompts/') && method === 'POST') {
+                const name = decodeURIComponent(path.slice('/api/prompts/'.length));
+                await handleGetPrompt(req, res, ctx, name);
+                return;
+            }
+            // GET /api/resources/content?uri=
+            if (path === '/api/resources/content' && method === 'GET') {
+                await handleResourceContent(req, res, ctx);
+                return;
+            }
+            // GET /api/resources/templates
+            if (path === '/api/resources/templates' && method === 'GET') {
+                await handleResourceTemplates(req, res, ctx);
+                return;
+            }
+            // GET /api/resources
+            if (path === '/api/resources' && method === 'GET') {
+                await handleListResources(req, res, ctx);
+                return;
+            }
+            // GET /api/session/all (before /api/session)
+            if (path === '/api/session/all' && method === 'GET') {
+                await handleListSessions(req, res, ctx);
+                return;
+            }
+            // POST /api/session/enabled-tools
+            if (path === '/api/session/enabled-tools' && method === 'POST') {
+                await handleEnableTools(req, res, ctx);
+                return;
+            }
+            // DELETE /api/session/enabled-tools
+            if (path === '/api/session/enabled-tools' && method === 'DELETE') {
+                await handleDisableAllTools(req, res, ctx);
+                return;
+            }
+            // POST /api/session/instance
+            if (path === '/api/session/instance' && method === 'POST') {
+                await handleSetInstance(req, res, ctx);
+                return;
+            }
+            // DELETE /api/session/instance
+            if (path === '/api/session/instance' && method === 'DELETE') {
+                await handleClearInstance(req, res, ctx);
+                return;
+            }
+            // GET /api/session
+            if (path === '/api/session' && method === 'GET') {
+                await handleGetSession(req, res, ctx);
+                return;
+            }
+            // GET /api/instances
+            if (path === '/api/instances' && method === 'GET') {
+                await handleListInstances(req, res, ctx);
+                return;
+            }
+            // No route matched.
+            sendError(res, 404, 'not-found', `Not found: ${method} ${path}`, false);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (!res.headersSent) {
+                sendError(res, 500, 'internal-error', message, false);
+            }
+        }
+    };
+}
+//# sourceMappingURL=router.js.map

package/dist/server/rest/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/server/rest/router.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACrG,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,GAAgB;IAC/C,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC1B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,IAAI,CAAC;YACH,qEAAqE;YACrE,kEAAkE;YAClE,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,EAAE,0CAA0C,EAAE,KAAK,CAAC,CAAC;gBAC3F,OAAO;YACT,CAAC;YAED,uEAAuE;YACvE,0EAA0E;YAC1E,sCAAsC;YACtC,IAAI,GAAG,CAAC,YAAY,EAAE,KAAK,KAAK,WAAW;gBACvC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;gBAClD,SAAS,CACP,GAAG,EACH,GAAG,EACH,wBAAwB,EACxB,kDAAkD,EAClD,IAAI,CACL,CAAC;gBACF,OAAO;YACT,CAAC;YAED,gCAAgC;YAChC,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACzC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC3C,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YAED,IAAI,IAAI,KAAK,aAAa,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC/C,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,iBAAiB;YACjB,IAAI,IAAI,KAAK,YAAY,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC9C,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,yBAAyB;YACzB,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;gBAClE,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACvD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;gBAChD,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,iBAAiB;YACjB,IAAI,IAAI,KAAK,YAAY,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC9C,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACrC,OAAO;YACT,CAAC;YAED,wBAAwB;YACxB,IAAI,IAAI,KAAK,mBAAmB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrD,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,gCAAgC;YAChC,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/D,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;gBACzE,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,IAAI,IAAI,KAAK,cAAc,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAChD,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,2BAA2B;YAC3B,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;gBACpE,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,kCAAkC;YAClC,IAAI,IAAI,KAAK,wBAAwB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC1D,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,KAAK,0BAA0B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC5D,MAAM,uBAAuB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,IAAI,IAAI,KAAK,gBAAgB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAClD,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,6CAA6C;YAC7C,IAAI,IAAI,KAAK,kBAAkB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACpD,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,kCAAkC;YAClC,IAAI,IAAI,KAAK,4BAA4B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC/D,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,oCAAoC;YACpC,IAAI,IAAI,KAAK,4BAA4B,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC3C,OAAO;YACT,CAAC;YAED,6BAA6B;YAC7B,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACvC,OAAO;YACT,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,KAAK,uBAAuB,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,mBAAmB;YACnB,IAAI,IAAI,KAAK,cAAc,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAChD,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YAED,qBAAqB;YACrB,IAAI,IAAI,KAAK,gBAAgB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBAClD,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,oBAAoB;YACpB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,MAAM,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/rest/session.d.ts

@@ -0,0 +1,16 @@
+/**
+ * REST routes: GET /api/session, POST /api/session/enabled-tools,
+ * DELETE /api/session/enabled-tools, GET /api/session/all
+ *
+ * Response shapes match the .NET SessionEndpoints.cs exactly.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { RestContext } from './context.js';
+/** GET /api/session — return current session state. */
+export declare function handleGetSession(req: IncomingMessage, res: ServerResponse, ctx: RestContext): Promise<void>;
+/** POST /api/session/enabled-tools — body { toolIds: string[] }. */
+export declare function handleEnableTools(req: IncomingMessage, res: ServerResponse, ctx: RestContext): Promise<void>;
+/** DELETE /api/session/enabled-tools — disable all tools. */
+export declare function handleDisableAllTools(req: IncomingMessage, res: ServerResponse, ctx: RestContext): Promise<void>;
+/** GET /api/session/all — list all sessions. */
+export declare function handleListSessions(req: IncomingMessage, res: ServerResponse, ctx: RestContext): Promise<void>;

package/dist/server/rest/session.js

@@ -0,0 +1,108 @@
+/**
+ * REST routes: GET /api/session, POST /api/session/enabled-tools,
+ * DELETE /api/session/enabled-tools, GET /api/session/all
+ *
+ * Response shapes match the .NET SessionEndpoints.cs exactly.
+ */
+import { sendJson, readJsonBody } from './context.js';
+import { restAuthMiddleware, extractSessionId } from './auth.js';
+/** Convert a Set<string> | null to a sorted array or null (null = all enabled). */
+function enabledToolsToJson(tools) {
+    if (tools === null)
+        return null;
+    return Array.from(tools).sort((a, b) => a.localeCompare(b));
+}
+/** GET /api/session — return current session state. */
+export async function handleGetSession(req, res, ctx) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    ctx.sessionStore.touch(sessionId);
+    sendJson(res, 200, {
+        sessionId: state.sessionId,
+        activeInstanceId: state.activeInstanceId,
+        enabledTools: enabledToolsToJson(state.enabledTools),
+        lastSeenUtc: state.lastSeenUtc.toISOString(),
+    });
+}
+/** POST /api/session/enabled-tools — body { toolIds: string[] }. */
+export async function handleEnableTools(req, res, ctx) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    let body;
+    try {
+        body = await readJsonBody(req);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        sendJson(res, 400, { error: `Invalid JSON body: ${message}` });
+        return;
+    }
+    if (body === null) {
+        state.enabledTools = null;
+    }
+    else if (typeof body !== 'object' || Array.isArray(body)) {
+        sendJson(res, 400, { error: 'Request body must be a JSON object of the form { "toolIds": [...] }.' });
+        return;
+    }
+    else {
+        const obj = body;
+        if (!('toolIds' in obj)) {
+            sendJson(res, 400, { error: "Missing required field 'toolIds'." });
+            return;
+        }
+        if (!Array.isArray(obj.toolIds)) {
+            sendJson(res, 400, { error: "Field 'toolIds' must be an array of strings." });
+            return;
+        }
+        const ids = new Set();
+        for (const item of obj.toolIds) {
+            if (typeof item !== 'string') {
+                sendJson(res, 400, { error: "Every entry in 'toolIds' must be a string." });
+                return;
+            }
+            if (item.length > 0)
+                ids.add(item);
+        }
+        // Empty array = all tools enabled (null).
+        state.enabledTools = ids.size > 0 ? ids : null;
+    }
+    ctx.sessionStore.touch(sessionId);
+    sendJson(res, 200, {
+        sessionId: state.sessionId,
+        enabledTools: enabledToolsToJson(state.enabledTools),
+    });
+}
+/** DELETE /api/session/enabled-tools — disable all tools. */
+export async function handleDisableAllTools(req, res, ctx) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    state.enabledTools = new Set();
+    ctx.sessionStore.touch(sessionId);
+    sendJson(res, 200, {
+        sessionId: state.sessionId,
+        enabledTools: [],
+    });
+}
+/** GET /api/session/all — list all sessions. */
+export async function handleListSessions(req, res, ctx) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    const snapshot = ctx.sessionStore.snapshot();
+    const sessions = snapshot.map((s) => ({
+        sessionId: s.sessionId,
+        activeInstanceId: s.activeInstanceId,
+        enabledTools: enabledToolsToJson(s.enabledTools),
+        lastSeenUtc: s.lastSeenUtc.toISOString(),
+    }));
+    sendJson(res, 200, {
+        count: snapshot.length,
+        sessions,
+    });
+}
+//# sourceMappingURL=session.js.map

package/dist/server/rest/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/server/rest/session.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjE,mFAAmF;AACnF,SAAS,kBAAkB,CAAC,KAAyB;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAgB;IAChG,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC;QACpD,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAgB;IACjG,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC;IAC5B,CAAC;SAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,0CAA0C;QAC1C,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAED,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAgB;IACrG,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAgB;IAClG,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC;QAChD,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE;KACzC,CAAC,CAAC,CAAC;IAEJ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/server/rest/system-tools.d.ts

@@ -0,0 +1,11 @@
+/**
+ * REST routes: GET /api/system-tools, POST /api/system-tools/{name}
+ *
+ * Response shapes match the .NET SystemToolEndpoints.cs exactly.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { RestContext } from './context.js';
+/** GET /api/system-tools — list all available system tools. */
+export declare function handleListSystemTools(req: IncomingMessage, res: ServerResponse, ctx: RestContext): Promise<void>;
+/** POST /api/system-tools/{name} — invoke a system tool by name. */
+export declare function handleCallSystemTool(req: IncomingMessage, res: ServerResponse, ctx: RestContext, toolName: string): Promise<void>;

package/dist/server/rest/system-tools.js

@@ -0,0 +1,150 @@
+/**
+ * REST routes: GET /api/system-tools, POST /api/system-tools/{name}
+ *
+ * Response shapes match the .NET SystemToolEndpoints.cs exactly.
+ */
+import { sendJson, readJsonBody, isExplicitToolCallWrapper, sendStructuredToolCallError, createRestRequestSignal, } from './context.js';
+import { forwardToPlugin, generateRequestID } from './forward.js';
+import { restAuthMiddleware, extractSessionId } from './auth.js';
+import { ClientFacingMethod as Methods } from '../types.js';
+import { normalizeRestToolCall } from '../../tool-call-control.js';
+/** GET /api/system-tools — list all available system tools. */
+export async function handleListSystemTools(req, res, ctx) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    let response;
+    try {
+        response = (await forwardToPlugin(ctx, Methods.RunListSystemTool, {
+            requestID: generateRequestID(),
+        }, {
+            instanceId: state.activeInstanceId,
+        }));
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Plugin forwarding failed.';
+        sendJson(res, 500, { error: message });
+        return;
+    }
+    if (!response) {
+        sendJson(res, 500, { error: 'System tool hub returned a null response.' });
+        return;
+    }
+    if (response.status === 'error') {
+        sendJson(res, 500, { error: response.message ?? 'Failed to list system tools.' });
+        return;
+    }
+    const tools = [];
+    if (response.value) {
+        for (const tool of response.value) {
+            if (!tool)
+                continue;
+            const entry = {
+                name: tool.name,
+                enabled: tool.enabled,
+            };
+            if (tool.title != null)
+                entry.title = tool.title;
+            if (tool.description != null)
+                entry.description = tool.description;
+            if (tool.inputSchema !== undefined && tool.inputSchema !== null)
+                entry.inputSchema = tool.inputSchema;
+            if (tool.outputSchema !== undefined && tool.outputSchema !== null)
+                entry.outputSchema = tool.outputSchema;
+            tools.push(entry);
+        }
+    }
+    sendJson(res, 200, tools);
+}
+/** POST /api/system-tools/{name} — invoke a system tool by name. */
+export async function handleCallSystemTool(req, res, ctx, toolName) {
+    if (!restAuthMiddleware(req, res, { token: ctx.authToken }))
+        return;
+    if (!toolName || toolName.trim().length === 0) {
+        sendJson(res, 400, { error: 'System tool name must not be empty.' });
+        return;
+    }
+    let body;
+    let normalized;
+    try {
+        body = await readJsonBody(req);
+        normalized = normalizeRestToolCall(toolName, body);
+    }
+    catch (err) {
+        if (isExplicitToolCallWrapper(body)) {
+            sendStructuredToolCallError(res, err);
+            return;
+        }
+        const message = err instanceof Error ? err.message : String(err);
+        sendJson(res, 400, { error: `Invalid JSON body: ${message}` });
+        return;
+    }
+    const sessionId = extractSessionId(req);
+    const state = ctx.sessionStore.getOrCreate(sessionId);
+    const controlled = !normalized.context.legacy;
+    if (normalized.context.deadlineUnixMs !== undefined && normalized.context.deadlineUnixMs <= Date.now()) {
+        if (controlled)
+            sendStructuredToolCallError(res, {
+                code: 'deadline_exceeded',
+                message: 'Tool call deadline expired.',
+                retryable: false,
+            }, normalized.context);
+        else
+            sendJson(res, 500, { error: 'Tool call deadline expired.' });
+        return;
+    }
+    const requestSignal = createRestRequestSignal(req, res);
+    let response;
+    try {
+        response = (await forwardToPlugin(ctx, Methods.RunSystemTool, normalized.request, {
+            instanceId: state.activeInstanceId,
+            deferredRequestID: normalized.request.requestID,
+            signal: requestSignal.signal,
+            deadlineUnixMs: normalized.context.deadlineUnixMs,
+            context: normalized.context,
+        }));
+    }
+    catch (err) {
+        requestSignal.dispose();
+        if (controlled) {
+            sendStructuredToolCallError(res, err, normalized.context);
+            return;
+        }
+        const message = err instanceof Error ? err.message : 'Plugin forwarding failed.';
+        sendJson(res, 500, { error: message });
+        return;
+    }
+    requestSignal.dispose();
+    ctx.sessionStore.touch(sessionId);
+    if (!response) {
+        sendJson(res, 500, { error: 'System tool hub returned a null response.' });
+        return;
+    }
+    if (response.status === 'error') {
+        if (controlled) {
+            sendStructuredToolCallError(res, response.error ?? response.message, normalized.context);
+            return;
+        }
+        sendJson(res, 500, { error: response.message ?? `System tool '${toolName}' returned an error.` });
+        return;
+    }
+    if (!response.value) {
+        sendJson(res, 200, { status: 'success', content: [] });
+        return;
+    }
+    if (response.value.structuredContent != null) {
+        sendJson(res, 200, {
+            status: 'success',
+            structured: response.value.structuredContent,
+            ...(response.value.transaction == null ? {} : { transaction: response.value.transaction }),
+        });
+        return;
+    }
+    sendJson(res, 200, {
+        status: 'success',
+        content: response.value.content,
+        ...(response.value.transaction == null ? {} : { transaction: response.value.transaction }),
+    });
+}
+//# sourceMappingURL=system-tools.js.map

package/dist/server/rest/system-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-tools.js","sourceRoot":"","sources":["../../../src/server/rest/system-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAAE,kBAAkB,IAAI,OAAO,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAA2B,MAAM,4BAA4B,CAAC;AAE5F,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAoB,EAAE,GAAmB,EAAE,GAAgB;IACrG,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,iBAAiB,EAAE;YAChE,SAAS,EAAE,iBAAiB,EAAE;SACtB,EAAE;YACV,UAAU,EAAE,KAAK,CAAC,gBAAgB;SACnC,CAAC,CAAqC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACjF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,IAAI,8BAA8B,EAAE,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAA8B,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,MAAM,KAAK,GAA4B;gBACrC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC;YACF,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI;gBAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACjD,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI;gBAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACnE,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;gBAAE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YACtG,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;gBAAE,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YAC1G,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAoB,EACpB,GAAmB,EACnB,GAAgB,EAChB,QAAgB;IAEhB,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAAE,OAAO;IAEpE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,UAAU,GAAG,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,2BAA2B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9C,IAAI,UAAU,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACvG,IAAI,UAAU;YAAE,2BAA2B,CAAC,GAAG,EAAE;gBAC/C,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,6BAA6B;gBACtC,SAAS,EAAE,KAAK;aACjB,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;;YAClB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,uBAAuB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAExD,IAAI,QAA+C,CAAC;IACpD,IAAI,CAAC;QACH,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,OAAO,EAAE;YAChF,UAAU,EAAE,KAAK,CAAC,gBAAgB;YAClC,iBAAiB,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS;YAC/C,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc;YACjD,OAAO,EAAE,UAAU,CAAC,OAAO;SAC5B,CAAC,CAAmC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,aAAa,CAAC,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,EAAE,CAAC;YACf,2BAA2B,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YAC1D,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC;QACjF,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,aAAa,CAAC,OAAO,EAAE,CAAC;IAExB,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,IAAI,UAAU,EAAE,CAAC;YACf,2BAA2B,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,IAAI,gBAAgB,QAAQ,sBAAsB,EAAE,CAAC,CAAC;QAClG,OAAO;IACT,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;QAC7C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,MAAM,EAAE,SAAS;YACjB,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,iBAAiB;YAC5C,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;SAC3F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;QACjB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO;QAC/B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC"}

package/dist/server/rest/tools.d.ts

@@ -0,0 +1,11 @@
+/**
+ * REST routes: GET /api/tools, POST /api/tools/{name}
+ *
+ * Response shapes match the .NET DirectToolCallEndpoints.cs exactly.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { RestContext } from './context.js';
+/** GET /api/tools — list all available tools with session filter. */
+export declare function handleListTools(req: IncomingMessage, res: ServerResponse, ctx: RestContext): Promise<void>;
+/** POST /api/tools/{name} — invoke a tool by name. */
+export declare function handleCallTool(req: IncomingMessage, res: ServerResponse, ctx: RestContext, toolName: string): Promise<void>;