@cats-inc/cats-platform 0.1.0

package/build/server/app/renderer/useGuideCatSidecarState.js

@@ -0,0 +1,164 @@
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { useLocation } from 'react-router-dom';
+import { isSettingsPath } from '../../shared/settingsRoute.js';
+function resolveManualOpenState(mode, prefersBubble = false) {
+    // `prefersBubble` is set when the surface is too cramped for the full
+    // drawer panel (e.g. /settings with a docked pill). In that case auto
+    // mode downgrades to the bubble peek so the panel does not cover the
+    // settings canvas. Bubble mode keeps its native peek regardless.
+    if (mode === 'bubble')
+        return 'welcome-peek';
+    if (prefersBubble && mode === 'auto')
+        return 'welcome-peek';
+    return 'open';
+}
+export function resolveGuideCatSidecarRestingState() {
+    return 'collapsed';
+}
+export function resolveGuideCatSidecarProactiveState(mode) {
+    return mode === 'drawer' ? 'open' : 'welcome-peek';
+}
+export function queueGuideCatProactiveGreeting(current, nextToken) {
+    if (nextToken <= current.lastQueuedToken) {
+        return current;
+    }
+    return {
+        lastQueuedToken: nextToken,
+        pendingToken: nextToken,
+    };
+}
+export function consumeGuideCatProactiveGreeting(current, isHiddenRoute) {
+    if (isHiddenRoute || current.pendingToken == null) {
+        return { queue: current, shouldOpen: false };
+    }
+    return {
+        queue: {
+            ...current,
+            pendingToken: null,
+        },
+        shouldOpen: true,
+    };
+}
+/** Pure step combining queue → consume → resolve for the proactive greeting
+ * effect. Keeping it outside of React lets tests lock in the one-shot
+ * contract: once a token is consumed, subsequent ticks with the same token
+ * must not re-open the peek even if `mode` changes, because proactive is
+ * a fire-once event and later mode switches are user intent, not replay. */
+export function tickGuideCatProactiveGreeting(input) {
+    const queued = queueGuideCatProactiveGreeting(input.queue, input.token);
+    const consumed = consumeGuideCatProactiveGreeting(queued, input.isHiddenRoute);
+    if (!consumed.shouldOpen) {
+        return { queue: consumed.queue, commit: null };
+    }
+    return {
+        queue: consumed.queue,
+        commit: {
+            innerState: resolveGuideCatSidecarProactiveState(input.mode),
+            proactive: true,
+        },
+    };
+}
+export function toggleGuideCatSidecarState(prev, mode, prefersBubble = false) {
+    if (prev === 'collapsed') {
+        return { nextState: resolveManualOpenState(mode, prefersBubble), persistSeen: false };
+    }
+    if (prev === 'welcome-peek') {
+        if (mode === 'bubble' || (prefersBubble && mode === 'auto')) {
+            // Cramped-surface auto mirrors bubble's collapsed ↔ welcome-peek cycle
+            // so the user stays in the same shape instead of getting a surprise
+            // drawer on the next click.
+            return { nextState: 'collapsed', persistSeen: true };
+        }
+        return { nextState: 'open', persistSeen: true };
+    }
+    return { nextState: 'collapsed', persistSeen: false };
+}
+export function collapseGuideCatSidecarState(prev) {
+    return {
+        nextState: 'collapsed',
+        persistSeen: prev === 'welcome-peek',
+    };
+}
+export function resolveGuideCatSidecarPreferenceState() {
+    return resolveGuideCatSidecarRestingState();
+}
+export function useGuideCatSidecarState(mode, onPersistSeen, proactiveGreetingToken = 0, placement = 'floating') {
+    const location = useLocation();
+    const [innerState, setInnerState] = useState(() => resolveGuideCatSidecarPreferenceState());
+    const [proactive, setProactive] = useState(false);
+    const proactiveQueueRef = useRef({
+        lastQueuedToken: 0,
+        pendingToken: null,
+    });
+    // `mode` is read via ref inside the proactive effect so later mode
+    // changes don't re-run the effect and replay the one-shot greeting. The
+    // inline ref update is safe here because `useEffect` always runs after
+    // render commits — the effect sees the latest committed mode.
+    const modeRef = useRef(mode);
+    modeRef.current = mode;
+    const isSetupRoute = location.pathname === '/setup';
+    const isSettingsRoute = isSettingsPath(location.pathname);
+    // Settings hides the sidecar for floating placement because there is no
+    // canvas to anchor against, but a docked pill should still be clickable
+    // from the sidebar chrome even while the settings page is open. The
+    // `prefersBubble` hint below downgrades that click from the drawer panel
+    // to the speech-bubble peek so the panel does not smother settings.
+    const isHiddenRoute = isSetupRoute || (isSettingsRoute && placement !== 'docked');
+    const prefersBubble = isSettingsRoute && placement === 'docked';
+    useEffect(() => {
+        if (!isHiddenRoute) {
+            return;
+        }
+        setProactive(false);
+        setInnerState((prev) => {
+            const nextState = resolveGuideCatSidecarPreferenceState();
+            return prev === nextState ? prev : nextState;
+        });
+    }, [isHiddenRoute]);
+    useEffect(() => {
+        // Proactive greeting glue (queue → consume → resolve) lives in
+        // `tickGuideCatProactiveGreeting` so the one-shot-on-mode-change
+        // contract is unit-testable without React. See that function's doc.
+        const result = tickGuideCatProactiveGreeting({
+            queue: proactiveQueueRef.current,
+            token: proactiveGreetingToken,
+            isHiddenRoute,
+            mode: modeRef.current,
+        });
+        proactiveQueueRef.current = result.queue;
+        if (!result.commit) {
+            return;
+        }
+        const { innerState: nextInnerState, proactive: nextProactive } = result.commit;
+        setProactive(nextProactive);
+        setInnerState((prev) => (prev === nextInnerState ? prev : nextInnerState));
+    }, [isHiddenRoute, proactiveGreetingToken]);
+    const viewState = isHiddenRoute ? 'hidden' : innerState;
+    const toggle = useCallback(() => {
+        setProactive(false);
+        setInnerState((prev) => {
+            const transition = toggleGuideCatSidecarState(prev, mode, prefersBubble);
+            if (transition.persistSeen) {
+                onPersistSeen();
+            }
+            return transition.nextState;
+        });
+    }, [mode, onPersistSeen, prefersBubble]);
+    const collapse = useCallback(() => {
+        setProactive(false);
+        setInnerState((prev) => {
+            const transition = collapseGuideCatSidecarState(prev);
+            if (transition.persistSeen) {
+                onPersistSeen();
+            }
+            return transition.nextState;
+        });
+    }, [onPersistSeen]);
+    const dismissWelcome = useCallback(() => {
+        setProactive(false);
+        setInnerState('collapsed');
+        onPersistSeen();
+    }, [onPersistSeen]);
+    return { viewState, proactive, toggle, collapse, dismissWelcome };
+}
+//# sourceMappingURL=useGuideCatSidecarState.js.map

package/build/server/app/renderer/useGuideCatSidecarState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useGuideCatSidecarState.js","sourceRoot":"","sources":["../../../../src/app/renderer/useGuideCatSidecarState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAmB/D,SAAS,sBAAsB,CAC7B,IAAyB,EACzB,aAAa,GAAG,KAAK;IAErB,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,iEAAiE;IACjE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC;IAC7C,IAAI,aAAa,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,cAAc,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kCAAkC;IAChD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,IAAyB;IAEzB,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,OAAuC,EACvC,SAAiB;IAEjB,IAAI,SAAS,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO;QACL,eAAe,EAAE,SAAS;QAC1B,YAAY,EAAE,SAAS;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAuC,EACvC,aAAsB;IAEtB,IAAI,aAAa,IAAI,OAAO,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,KAAK,EAAE;YACL,GAAG,OAAO;YACV,YAAY,EAAE,IAAI;SACnB;QACD,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAOD;;;;4EAI4E;AAC5E,MAAM,UAAU,6BAA6B,CAAC,KAK7C;IACC,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,gCAAgC,CAAC,MAAM,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,MAAM,EAAE;YACN,UAAU,EAAE,oCAAoC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5D,SAAS,EAAE,IAAI;SAChB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,IAA+B,EAC/B,IAAyB,EACzB,aAAa,GAAG,KAAK;IAErB,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,sBAAsB,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;YAC5D,uEAAuE;YACvE,oEAAoE;YACpE,4BAA4B;YAC5B,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,IAA+B;IAE/B,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,WAAW,EAAE,IAAI,KAAK,cAAc;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC;IACnD,OAAO,kCAAkC,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAyB,EACzB,aAAyB,EACzB,sBAAsB,GAAG,CAAC,EAC1B,YAA+B,UAAU;IAEzC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,QAAQ,CAC1C,GAAG,EAAE,CAAC,qCAAqC,EAAE,CAC9C,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,iBAAiB,GAAG,MAAM,CAAiC;QAC/D,eAAe,EAAE,CAAC;QAClB,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IACH,mEAAmE;IACnE,wEAAwE;IACxE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IAEvB,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACpD,MAAM,eAAe,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1D,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,aAAa,GAAG,YAAY,IAAI,CAAC,eAAe,IAAI,SAAS,KAAK,QAAQ,CAAC,CAAC;IAClF,MAAM,aAAa,GAAG,eAAe,IAAI,SAAS,KAAK,QAAQ,CAAC;IAEhE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,SAAS,GAAG,qCAAqC,EAAE,CAAC;YAC1D,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,SAAS,CAAC,GAAG,EAAE;QACb,+DAA+D;QAC/D,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,MAAM,GAAG,6BAA6B,CAAC;YAC3C,KAAK,EAAE,iBAAiB,CAAC,OAAO;YAChC,KAAK,EAAE,sBAAsB;YAC7B,aAAa;YACb,IAAI,EAAE,OAAO,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,iBAAiB,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QACD,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/E,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC7E,CAAC,EAAE,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAE5C,MAAM,SAAS,GAA6B,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;IAElF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;YACzE,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,aAAa,EAAE,CAAC;YAClB,CAAC;YACD,OAAO,UAAU,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC;IAEzC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAChC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE;YACrB,MAAM,UAAU,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,aAAa,EAAE,CAAC;YAClB,CAAC;YACD,OAAO,UAAU,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,MAAM,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;QACtC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3B,aAAa,EAAE,CAAC;IAClB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAEpB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;AACpE,CAAC"}

package/build/server/app/server/appPackageRoutes.d.ts

@@ -0,0 +1,9 @@
+import type { AppConfig } from '../../config.js';
+import { type RouteContext } from '../../shared/http.js';
+export interface AppPackageApiDependencies {
+    config: Pick<AppConfig, 'chatStatePath'>;
+    now?: () => Date;
+}
+export type AppPackageRouteContext = RouteContext<AppPackageApiDependencies>;
+export declare function routeAppPackageApi(context: AppPackageRouteContext): Promise<boolean>;
+//# sourceMappingURL=appPackageRoutes.d.ts.map

package/build/server/app/server/appPackageRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appPackageRoutes.d.ts","sourceRoot":"","sources":["../../../../src/app/server/appPackageRoutes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AASjD,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,sBAAsB,CAAC;AAU9B,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,sBAAsB,GAAG,YAAY,CAAC,yBAAyB,CAAC,CAAC;AAkW7E,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAiFlB"}

package/build/server/app/server/appPackageRoutes.js

@@ -0,0 +1,346 @@
+import { readFile, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { parseCatsAppManifestV1, } from '../../shared/catsAppValidation.js';
+import { matchRoute, readJsonBody, sendJson, sendMethodNotAllowed, } from '../../shared/http.js';
+import { readPlatformInstalledAppDescriptors, readPlatformProductDescriptors, toPlatformInstalledAppDescriptor, } from '../../platform/apps/envelope.js';
+import { resolveCatsAppStoragePathsFromChatState } from '../../platform/apps/paths.js';
+import { FileCatsAppRegistry } from '../../platform/apps/registry.js';
+import { PLATFORM_ENTITY_PATH_PREFIXES } from '../../shared/platformRoutePaths.js';
+const CATS_APP_MANIFEST_FILE = 'cats.app.json';
+const RESERVED_APP_IDS = new Set(['install', 'validate']);
+const BASE_RESERVED_SETTINGS_PATHS = [
+    '/settings',
+    '/settings/general',
+    '/settings/cats',
+    '/settings/assistants',
+    '/settings/apps',
+    '/settings/desktop',
+    '/settings/runtime',
+    '/settings/data',
+];
+function appRegistryFor(context) {
+    const paths = resolveCatsAppStoragePathsFromChatState(context.dependencies.config.chatStatePath);
+    return new FileCatsAppRegistry({
+        registryPath: paths.registryPath,
+        now: context.dependencies.now,
+    });
+}
+function badRequestIssue(message, pathName = 'packagePath') {
+    return {
+        code: 'invalid_cats_app_package_request',
+        message,
+        path: pathName,
+    };
+}
+function reservedAppIdIssue(appId) {
+    return {
+        code: 'reserved_cats_app_id',
+        message: `Cats app id "${appId}" is reserved by the app management API.`,
+        path: 'id',
+        details: { appId },
+    };
+}
+function readInstalledProductModuleRoutePrefixes(records) {
+    return records
+        .filter((record) => record.installState !== 'uninstalled'
+        && record.manifest.category === 'product-module'
+        && record.manifest.trustTier === 'system')
+        .flatMap((record) => record.manifest.contributions.products?.map((product) => product.routePrefix) ?? []);
+}
+function readInstalledProductModuleSettingsPaths(records) {
+    return records
+        .filter((record) => record.installState !== 'uninstalled'
+        && record.manifest.category === 'product-module'
+        && record.manifest.trustTier === 'system')
+        .flatMap((record) => record.manifest.contributions.products?.flatMap((product) => product.settings?.map((setting) => setting.path) ?? []) ?? []);
+}
+async function readLocalManifestPackage(input) {
+    const rawPackagePath = input.packagePath?.trim();
+    if (!rawPackagePath) {
+        return { ok: false, issues: [badRequestIssue('packagePath is required.')] };
+    }
+    const resolvedPackagePath = path.resolve(rawPackagePath);
+    let manifestPath = resolvedPackagePath;
+    try {
+        const packageStats = await stat(resolvedPackagePath);
+        if (packageStats.isDirectory()) {
+            manifestPath = path.join(resolvedPackagePath, CATS_APP_MANIFEST_FILE);
+        }
+    }
+    catch {
+        return {
+            ok: false,
+            issues: [badRequestIssue(`Package path does not exist: ${resolvedPackagePath}.`)],
+        };
+    }
+    try {
+        const manifestJson = JSON.parse(await readFile(manifestPath, 'utf8'));
+        return {
+            ok: true,
+            value: {
+                packagePath: resolvedPackagePath,
+                manifestPath,
+                manifestJson,
+            },
+        };
+    }
+    catch (error) {
+        const message = error instanceof SyntaxError
+            ? `Invalid ${CATS_APP_MANIFEST_FILE} JSON.`
+            : `Cannot read ${CATS_APP_MANIFEST_FILE}.`;
+        return {
+            ok: false,
+            issues: [badRequestIssue(message, 'manifest')],
+        };
+    }
+}
+async function validateLocalManifestPackage(context, input) {
+    const packageRead = await readLocalManifestPackage(input);
+    if (!packageRead.ok) {
+        return { ok: false, issues: packageRead.issues };
+    }
+    const registry = appRegistryFor(context);
+    const registryState = await registry.readState();
+    const productDescriptors = await readPlatformProductDescriptors(context.dependencies.config.chatStatePath);
+    const parsed = parseCatsAppManifestV1(packageRead.value.manifestJson, {
+        existingAppIds: registryState.apps
+            .filter((record) => record.installState !== 'uninstalled')
+            .map((record) => record.id),
+        productRoutePrefixes: [
+            ...PLATFORM_ENTITY_PATH_PREFIXES,
+            ...productDescriptors.map((product) => product.routePrefix),
+            ...readInstalledProductModuleRoutePrefixes(registryState.apps),
+        ],
+        reservedSettingsPaths: [
+            ...BASE_RESERVED_SETTINGS_PATHS,
+            ...productDescriptors.flatMap((product) => product.settings?.map((setting) => setting.path) ?? []),
+            ...readInstalledProductModuleSettingsPaths(registryState.apps),
+        ],
+    });
+    if (!parsed.ok) {
+        return {
+            ok: false,
+            packagePath: packageRead.value.packagePath,
+            manifestPath: packageRead.value.manifestPath,
+            issues: parsed.issues,
+        };
+    }
+    if (RESERVED_APP_IDS.has(parsed.manifest.id)) {
+        return {
+            ok: false,
+            packagePath: packageRead.value.packagePath,
+            manifestPath: packageRead.value.manifestPath,
+            issues: [reservedAppIdIssue(parsed.manifest.id)],
+        };
+    }
+    return {
+        ok: true,
+        packagePath: packageRead.value.packagePath,
+        manifestPath: packageRead.value.manifestPath,
+        manifest: parsed.manifest,
+    };
+}
+async function handleValidate(context) {
+    let body;
+    try {
+        body = await readJsonBody(context.request);
+    }
+    catch (error) {
+        sendJson(context.response, 400, {
+            ok: false,
+            issues: [badRequestIssue(error instanceof Error ? error.message : 'Invalid request body.')],
+        });
+        return;
+    }
+    const result = await validateLocalManifestPackage(context, body);
+    sendJson(context.response, result.ok ? 200 : 400, result);
+}
+async function handleInstall(context) {
+    let body;
+    try {
+        body = await readJsonBody(context.request);
+    }
+    catch (error) {
+        sendJson(context.response, 400, {
+            ok: false,
+            issues: [badRequestIssue(error instanceof Error ? error.message : 'Invalid request body.')],
+        });
+        return;
+    }
+    const result = await validateLocalManifestPackage(context, body);
+    if (!result.ok) {
+        sendJson(context.response, 400, result);
+        return;
+    }
+    const registry = appRegistryFor(context);
+    const record = await registry.installApp({
+        manifest: result.manifest,
+        packagePath: result.packagePath,
+        installState: body.enable === true ? 'enabled' : 'installed',
+    });
+    sendJson(context.response, 201, {
+        ok: true,
+        app: (await readPlatformInstalledAppDescriptors(context.dependencies.config.chatStatePath))
+            .find((descriptor) => descriptor.id === record.id) ?? null,
+    });
+}
+async function handleList(context) {
+    sendJson(context.response, 200, {
+        apps: await readPlatformInstalledAppDescriptors(context.dependencies.config.chatStatePath),
+    });
+}
+async function handleDetail(context, appId) {
+    const app = (await readPlatformInstalledAppDescriptors(context.dependencies.config.chatStatePath))
+        .find((descriptor) => descriptor.id === appId);
+    if (!app) {
+        sendJson(context.response, 404, {
+            error: { code: 'cats_app_not_found', message: `Cats app "${appId}" is not installed.` },
+        });
+        return;
+    }
+    sendJson(context.response, 200, { app });
+}
+async function handleInspect(context, appId) {
+    const registry = appRegistryFor(context);
+    const record = await registry.getInstalledApp(appId);
+    if (!record) {
+        sendJson(context.response, 404, {
+            error: { code: 'cats_app_not_found', message: `Cats app "${appId}" is not installed.` },
+        });
+        return;
+    }
+    sendJson(context.response, 200, {
+        app: toPlatformInstalledAppDescriptor(record),
+        record,
+    });
+}
+function resolveScopedApiRoute(record, method, scopedPath) {
+    return record.contributions.apiRoutes?.find((route) => route.method === method && route.path === scopedPath) ?? null;
+}
+async function handleScopedApiRoute(context, appId, scopedPath) {
+    const registry = appRegistryFor(context);
+    const record = await registry.getInstalledApp(appId);
+    if (!record) {
+        sendJson(context.response, 404, {
+            error: { code: 'cats_app_not_found', message: `Cats app "${appId}" is not installed.` },
+        });
+        return;
+    }
+    if (!record.enabled || record.installState !== 'enabled') {
+        sendJson(context.response, 409, {
+            error: {
+                code: 'cats_app_not_enabled',
+                message: `Cats app "${appId}" is not enabled.`,
+            },
+        });
+        return;
+    }
+    const route = resolveScopedApiRoute(record.manifest, context.method, scopedPath);
+    if (!route) {
+        sendJson(context.response, 404, {
+            error: {
+                code: 'cats_app_scoped_route_not_found',
+                message: `Cats app "${appId}" does not declare ${context.method} ${scopedPath}.`,
+            },
+        });
+        return;
+    }
+    sendJson(context.response, 501, {
+        error: {
+            code: 'cats_app_scoped_route_not_implemented',
+            message: `Cats app scoped route "${route.routeKey}" is declared but no executor is mounted yet.`,
+        },
+    });
+}
+async function handleStateMutation(context, appId, installState) {
+    try {
+        const registry = appRegistryFor(context);
+        await registry.updateAppState(appId, { installState });
+        await handleDetail(context, appId);
+    }
+    catch (error) {
+        sendJson(context.response, 404, {
+            error: {
+                code: 'cats_app_not_found',
+                message: error instanceof Error ? error.message : `Cats app "${appId}" is not installed.`,
+            },
+        });
+    }
+}
+async function handleUninstall(context, appId) {
+    const registry = appRegistryFor(context);
+    const purge = ['1', 'true'].includes(context.url.searchParams.get('purge') ?? '');
+    const app = await registry.uninstallApp(appId, { purge });
+    if (!app) {
+        sendJson(context.response, 404, {
+            error: { code: 'cats_app_not_found', message: `Cats app "${appId}" is not installed.` },
+        });
+        return;
+    }
+    sendJson(context.response, 200, { ok: true, appId, purged: purge });
+}
+export async function routeAppPackageApi(context) {
+    if (context.url.pathname === '/api/apps') {
+        if (context.method !== 'GET') {
+            sendMethodNotAllowed(context.response, ['GET']);
+            return true;
+        }
+        await handleList(context);
+        return true;
+    }
+    if (context.url.pathname === '/api/apps/validate') {
+        if (context.method !== 'POST') {
+            sendMethodNotAllowed(context.response, ['POST']);
+            return true;
+        }
+        await handleValidate(context);
+        return true;
+    }
+    if (context.url.pathname === '/api/apps/install') {
+        if (context.method !== 'POST') {
+            sendMethodNotAllowed(context.response, ['POST']);
+            return true;
+        }
+        await handleInstall(context);
+        return true;
+    }
+    const stateMutationMatch = matchRoute(context.url.pathname, /^\/api\/apps\/([^/]+)\/(enable|disable)$/u);
+    if (stateMutationMatch) {
+        if (context.method !== 'POST') {
+            sendMethodNotAllowed(context.response, ['POST']);
+            return true;
+        }
+        await handleStateMutation(context, stateMutationMatch[0], stateMutationMatch[1] === 'enable' ? 'enabled' : 'disabled');
+        return true;
+    }
+    const inspectMatch = matchRoute(context.url.pathname, /^\/api\/apps\/([^/]+)\/inspect$/u);
+    if (inspectMatch) {
+        if (context.method !== 'GET') {
+            sendMethodNotAllowed(context.response, ['GET']);
+            return true;
+        }
+        await handleInspect(context, inspectMatch[0]);
+        return true;
+    }
+    const scopedMatch = matchRoute(context.url.pathname, /^\/api\/apps\/([^/]+)\/scoped(?:\/(.*))?$/u);
+    if (scopedMatch) {
+        const scopedPath = scopedMatch[1] ? `/${scopedMatch[1]}` : '/';
+        await handleScopedApiRoute(context, scopedMatch[0], scopedPath);
+        return true;
+    }
+    const uninstallMatch = matchRoute(context.url.pathname, /^\/api\/apps\/([^/]+)$/u);
+    if (uninstallMatch && context.method === 'DELETE') {
+        await handleUninstall(context, uninstallMatch[0]);
+        return true;
+    }
+    if (uninstallMatch) {
+        if (context.method !== 'GET') {
+            sendMethodNotAllowed(context.response, ['GET', 'DELETE']);
+            return true;
+        }
+        await handleDetail(context, uninstallMatch[0]);
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=appPackageRoutes.js.map

package/build/server/app/server/appPackageRoutes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appPackageRoutes.js","sourceRoot":"","sources":["../../../../src/app/server/appPackageRoutes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAO7B,OAAO,EACL,sBAAsB,GAEvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACR,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,uCAAuC,EAAE,MAAM,8BAA8B,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,oCAAoC,CAAC;AAuBnF,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAC/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAE1D,MAAM,4BAA4B,GAAG;IACnC,WAAW;IACX,mBAAmB;IACnB,gBAAgB;IAChB,sBAAsB;IACtB,gBAAgB;IAChB,mBAAmB;IACnB,mBAAmB;IACnB,gBAAgB;CACjB,CAAC;AAEF,SAAS,cAAc,CAAC,OAA+B;IACrD,MAAM,KAAK,GAAG,uCAAuC,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACjG,OAAO,IAAI,mBAAmB,CAAC;QAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,GAAG,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,OAAe,EACf,QAAQ,GAAG,aAAa;IAExB,OAAO;QACL,IAAI,EAAE,kCAAkC;QACxC,OAAO;QACP,IAAI,EAAE,QAAQ;KACf,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,gBAAgB,KAAK,0CAA0C;QACxE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,EAAE,KAAK,EAAE;KACnB,CAAC;AACJ,CAAC;AAED,SAAS,uCAAuC,CAC9C,OAA0C;IAE1C,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,YAAY,KAAK,aAAa;WAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;WAC7C,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC;SAC3C,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClB,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,uCAAuC,CAC9C,OAA0C;IAE1C,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,YAAY,KAAK,aAAa;WAClC,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;WAC7C,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC;SAC3C,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAClB,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1D,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,KAA0B;IAIhE,MAAM,cAAc,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,YAAY,GAAG,mBAAmB,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrD,IAAI,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,eAAe,CAAC,gCAAgC,mBAAmB,GAAG,CAAC,CAAC;SAClF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAY,CAAC;QACjF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,WAAW,EAAE,mBAAmB;gBAChC,YAAY;gBACZ,YAAY;aACb;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,WAAW;YAC1C,CAAC,CAAC,WAAW,sBAAsB,QAAQ;YAC3C,CAAC,CAAC,eAAe,sBAAsB,GAAG,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;SAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,OAA+B,EAC/B,KAA0B;IAU1B,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC;IACnD,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC;IACjD,MAAM,kBAAkB,GAAG,MAAM,8BAA8B,CAC7D,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAC1C,CAAC;IACF,MAAM,MAAM,GAAG,sBAAsB,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,EAAE;QACpE,cAAc,EAAE,aAAa,CAAC,IAAI;aAC/B,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,KAAK,aAAa,CAAC;aACzD,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,oBAAoB,EAAE;YACpB,GAAG,6BAA6B;YAChC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;YAC3D,GAAG,uCAAuC,CAAC,aAAa,CAAC,IAAI,CAAC;SAC/D;QACD,qBAAqB,EAAE;YACrB,GAAG,4BAA4B;YAC/B,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzD,GAAG,uCAAuC,CAAC,aAAa,CAAC,IAAI,CAAC;SAC/D;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW;YAC1C,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;YAC5C,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW;YAC1C,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;YAC5C,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW;QAC1C,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,YAAY;QAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAA+B;IAC3D,IAAI,IAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAsB,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;SAC5F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAA+B;IAC1D,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,YAAY,CAAyB,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,CAAC,eAAe,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;SAC5F,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC;QACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;KAC7D,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC9B,EAAE,EAAE,IAAI;QACR,GAAG,EAAE,CAAC,MAAM,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;aACxF,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI;KAC7D,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAA+B;IACvD,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC9B,IAAI,EAAE,MAAM,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA+B,EAAE,KAAa;IACxE,MAAM,GAAG,GAAG,CAAC,MAAM,mCAAmC,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC/F,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,KAAK,qBAAqB,EAAE;SACxF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,OAA+B,EAAE,KAAa;IACzE,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,KAAK,qBAAqB,EAAE;SACxF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC9B,GAAG,EAAE,gCAAgC,CAAC,MAAM,CAAC;QAC7C,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB,EAAE,MAAc,EAAE,UAAkB;IAC1F,OAAO,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACpD,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,OAA+B,EAC/B,KAAa,EACb,UAAkB;IAElB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,KAAK,qBAAqB,EAAE;SACxF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACzD,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE;gBACL,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,aAAa,KAAK,mBAAmB;aAC/C;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE;gBACL,IAAI,EAAE,iCAAiC;gBACvC,OAAO,EAAE,aAAa,KAAK,sBAAsB,OAAO,CAAC,MAAM,IAAI,UAAU,GAAG;aACjF;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC9B,KAAK,EAAE;YACL,IAAI,EAAE,uCAAuC;YAC7C,OAAO,EAAE,0BAA0B,KAAK,CAAC,QAAQ,+CAA+C;SACjG;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,OAA+B,EAC/B,KAAa,EACb,YAAoC;IAEpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACvD,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,qBAAqB;aAC1F;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAA+B,EAAE,KAAa;IAC3E,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAClF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE;YAC9B,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,aAAa,KAAK,qBAAqB,EAAE;SACxF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA+B;IAE/B,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,kBAAkB,GAAG,UAAU,CACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,EACpB,2CAA2C,CAC5C,CAAC;IACF,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC9B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,mBAAmB,CACvB,OAAO,EACP,kBAAkB,CAAC,CAAC,CAAE,EACtB,kBAAkB,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAC5D,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAC;IAC1F,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAC5B,OAAO,CAAC,GAAG,CAAC,QAAQ,EACpB,4CAA4C,CAC7C,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/D,MAAM,oBAAoB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IACnF,IAAI,cAAc,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC7B,oBAAoB,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,YAAY,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/server/app/server/authErrorResponses.d.ts

@@ -0,0 +1,5 @@
+import type { ServerResponse } from 'node:http';
+import { type PlatformAuthErrorCode } from '../../platform/auth/index.js';
+export type PlatformAuthErrorStatusCode = 400 | 401 | 403 | 409 | 503;
+export declare function sendPlatformAuthError(response: ServerResponse, statusCode: PlatformAuthErrorStatusCode, code: PlatformAuthErrorCode, message: string): void;
+//# sourceMappingURL=authErrorResponses.d.ts.map

package/build/server/app/server/authErrorResponses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authErrorResponses.d.ts","sourceRoot":"","sources":["../../../../src/app/server/authErrorResponses.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,KAAK,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAG1E,MAAM,MAAM,2BAA2B,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;AAEtE,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,cAAc,EACxB,UAAU,EAAE,2BAA2B,EACvC,IAAI,EAAE,qBAAqB,EAC3B,OAAO,EAAE,MAAM,GACd,IAAI,CAON"}

package/build/server/app/server/authErrorResponses.js

@@ -0,0 +1,10 @@
+import { sendJson } from '../../shared/http.js';
+export function sendPlatformAuthError(response, statusCode, code, message) {
+    sendJson(response, statusCode, {
+        error: {
+            code,
+            message,
+        },
+    });
+}
+//# sourceMappingURL=authErrorResponses.js.map

package/build/server/app/server/authErrorResponses.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authErrorResponses.js","sourceRoot":"","sources":["../../../../src/app/server/authErrorResponses.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAIhD,MAAM,UAAU,qBAAqB,CACnC,QAAwB,EACxB,UAAuC,EACvC,IAA2B,EAC3B,OAAe;IAEf,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE;QAC7B,KAAK,EAAE;YACL,IAAI;YACJ,OAAO;SACR;KACF,CAAC,CAAC;AACL,CAAC"}

package/build/server/app/server/authGate.d.ts

@@ -0,0 +1,32 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type PlatformAuthStore, type PlatformPrincipal } from '../../platform/auth/index.js';
+import type { PlatformAuthConfig } from '../../platform/auth/config.js';
+import { type PlatformAuthGatePhase, type PlatformAuthRoutePolicy } from './authGatePolicy.js';
+export type PlatformAuthGateCredentialKind = 'browser_cookie' | 'mobile_bearer';
+export type PlatformAuthGateDecision = {
+    allowed: true;
+    policy: PlatformAuthRoutePolicy;
+    principal: PlatformPrincipal | null;
+    credentialKind: PlatformAuthGateCredentialKind | null;
+} | {
+    allowed: false;
+    policy: PlatformAuthRoutePolicy;
+    statusCode: 401 | 403;
+    code: 'E_UNAUTHENTICATED' | 'E_CSRF_MISMATCH';
+    message: string;
+};
+export type PlatformAuthGateRejection = Extract<PlatformAuthGateDecision, {
+    allowed: false;
+}>;
+export interface PlatformAuthGateInput {
+    request: IncomingMessage;
+    pathname: string;
+    method: string;
+    phase: PlatformAuthGatePhase;
+    authStore: PlatformAuthStore;
+    auth: PlatformAuthConfig;
+    now?: () => Date;
+}
+export declare function evaluatePlatformAuthGate(input: PlatformAuthGateInput): Promise<PlatformAuthGateDecision>;
+export declare function sendPlatformAuthGateRejection(response: ServerResponse, decision: PlatformAuthGateRejection): void;
+//# sourceMappingURL=authGate.d.ts.map

package/build/server/app/server/authGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authGate.d.ts","sourceRoot":"","sources":["../../../../src/app/server/authGate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAML,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC7B,MAAM,qBAAqB,CAAC;AAG7B,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAEhF,MAAM,MAAM,wBAAwB,GAChC;IACE,OAAO,EAAE,IAAI,CAAC;IACd,MAAM,EAAE,uBAAuB,CAAC;IAChC,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,8BAA8B,GAAG,IAAI,CAAC;CACvD,GACD;IACE,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,EAAE,GAAG,GAAG,GAAG,CAAC;IACtB,IAAI,EAAE,mBAAmB,GAAG,iBAAiB,CAAC;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,MAAM,yBAAyB,GAAG,OAAO,CAC7C,wBAAwB,EACxB;IAAE,OAAO,EAAE,KAAK,CAAA;CAAE,CACnB,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,eAAe,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,qBAAqB,CAAC;IAC7B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAOD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,wBAAwB,CAAC,CA8DnC;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,yBAAyB,GAClC,IAAI,CAEN"}