@chozzz/vargos 2.0.6 → 2.0.7

package/dist/cli.js

@@ -10,6 +10,8 @@
  *   vargos --help         print usage
  */
 import { existsSync, readFileSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
 import { getDataPaths } from './lib/paths.js';
 // ── Runtime guard ────────────────────────────────────────────────────────────
 const MIN_NODE = 20;
@@ -19,7 +21,9 @@ if (v[0] < MIN_NODE) {
     process.exit(1);
 }
 // ── Helpers ──────────────────────────────────────────────────────────────────
-const VERSION = '2.0.3';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const VERSION = JSON.parse(readFileSync(path.join(__dirname, '..', 'package.json'), 'utf8')).version;
 function usage() {
     console.log(`
   ⚡ Vargos — Self-hosted agent OS

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,gFAAgF;AAEhF,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvD,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,QAAQ,qBAAqB,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CACtF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,KAAK;IACZ,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAab,CAAC,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,GAAG,OAAO,QAAQ,CAAC;IAEpC,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;IAErD,MAAM,KAAK,GAA2C;QACpD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE;QACzC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,QAAQ,cAAc,EAAE;QAC1D,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,QAAQ,YAAY,EAAE;QACtD,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,QAAQ,gBAAgB,EAAE;KAC/D,CAAC;IAEF,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,KAAK,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,GAAG,GAAG;oBAClB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC,GAAG,mBAAmB;oBAC7F,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAEhF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5B,iBAAiB;AACjB,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,cAAc;AACd,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACrC,KAAK,EAAE,CAAC;IACR,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,oBAAoB;AACpB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IACrB,UAAU,EAAE,CAAC;IACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,qBAAqB;AACrB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IACtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,EAAE,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,mBAAmB;AACnB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IACpB,6CAA6C;IAC7C,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3B,2DAA2D;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,kBAAkB;AAClB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACxD,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,iCAAiC;AACjC,IAAI,UAAU,EAAE,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,GAAG,0BAA0B,CAAC,CAAC;IACnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;AAClE,CAAC;KAAM,CAAC;IACN,KAAK,EAAE,CAAC;AACV,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,gFAAgF;AAEhF,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvD,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,QAAQ,qBAAqB,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,CACtF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAErG,SAAS,KAAK;IACZ,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;CAab,CAAC,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IAC/C,MAAM,QAAQ,GAAG,GAAG,OAAO,QAAQ,CAAC;IAEpC,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;IAErD,MAAM,KAAK,GAA2C;QACpD,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE;QACzC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,QAAQ,cAAc,EAAE;QAC1D,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,QAAQ,YAAY,EAAE;QACtD,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,QAAQ,gBAAgB,EAAE;KAC/D,CAAC;IAEF,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,KAAK,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,SAAS,GACb,OAAO,CAAC,MAAM,GAAG,GAAG;oBAClB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC,GAAG,mBAAmB;oBAC7F,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,CAAC;IACtC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAEhF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE5B,iBAAiB;AACjB,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,cAAc;AACd,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;IACrC,KAAK,EAAE,CAAC;IACR,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,oBAAoB;AACpB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;IACrB,UAAU,EAAE,CAAC;IACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,qBAAqB;AACrB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;IACtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,EAAE,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,mBAAmB;AACnB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;IACpB,6CAA6C;IAC7C,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3B,2DAA2D;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,kBAAkB;AAClB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACxD,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,iCAAiC;AACjC,IAAI,UAAU,EAAE,EAAE,CAAC;IACjB,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,OAAO,GAAG,0BAA0B,CAAC,CAAC;IACnE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrD,MAAM,OAAO,EAAE,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;AAClE,CAAC;KAAM,CAAC;IACN,KAAK,EAAE,CAAC;AACV,CAAC;AAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/dist/edge/mcp/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * MCP edge service — translates MCP protocol to bus event calls.
+ *
+ * ListToolsRequest  → bus.search()
+ * CallToolRequest   → bus.call(eventName, args)
+ *
+ * Supports HTTP (StreamableHTTP) transport on port 9001.
+ * Bearer token auth from config.mcp.bearerToken.
+ */
+import type { Bus } from '../../gateway/bus.js';
+import type { AppConfig } from '../../services/config/index.js';
+export declare class McpEdge {
+    private readonly bus;
+    private readonly config;
+    private mcpServer;
+    private httpServer;
+    constructor(bus: Bus, config: AppConfig);
+    private httpHost;
+    private httpPort;
+    /** Path prefix for Streamable HTTP, always starts with / */
+    private httpEndpointPath;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    startStdio(): Promise<void>;
+    private startHttp;
+    private stopHttp;
+    private setupHandlers;
+    private buildOpenApiSpec;
+}
+export declare function boot(bus: Bus): Promise<{
+    stop(): Promise<void>;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/edge/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../edge/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAWhE,qBAAa,OAAO;IAKhB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IALzB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAA4B;gBAG3B,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS;IASpC,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,QAAQ;IAIhB,4DAA4D;IAC5D,OAAO,CAAC,gBAAgB;IAKlB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAStB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAOnB,SAAS;IAiEvB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,aAAa;YAwCP,gBAAgB;CAgD/B;AAID,wBAAsB,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;IAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAKvE"}

package/dist/edge/mcp/index.js

@@ -0,0 +1,217 @@
+/**
+ * MCP edge service — translates MCP protocol to bus event calls.
+ *
+ * ListToolsRequest  → bus.search()
+ * CallToolRequest   → bus.call(eventName, args)
+ *
+ * Supports HTTP (StreamableHTTP) transport on port 9001.
+ * Bearer token auth from config.mcp.bearerToken.
+ */
+import http from 'node:http';
+import { timingSafeEqual, createHash } from 'node:crypto';
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { CallToolRequestSchema, ListToolsRequestSchema, } from '@modelcontextprotocol/sdk/types.js';
+import { isToolEvent } from '../../gateway/emitter.js';
+import { createLogger } from '../../lib/logger.js';
+import { toMessage } from '../../lib/error.js';
+const log = createLogger('mcp');
+const VERSION = '0.0.1';
+// ── McpEdge ────────────────────────────────────────────────────────────────────
+export class McpEdge {
+    bus;
+    config;
+    mcpServer;
+    httpServer = null;
+    constructor(bus, config) {
+        this.bus = bus;
+        this.config = config;
+        this.mcpServer = new Server({ name: 'vargos', version: VERSION }, { capabilities: { tools: {} } });
+        this.setupHandlers();
+    }
+    httpHost() {
+        return this.config.mcp.host ?? '127.0.0.1';
+    }
+    httpPort() {
+        return this.config.mcp.port ?? 9001;
+    }
+    /** Path prefix for Streamable HTTP, always starts with / */
+    httpEndpointPath() {
+        const ep = this.config.mcp.endpoint ?? '/mcp';
+        return ep.startsWith('/') ? ep : `/${ep}`;
+    }
+    async start() {
+        if (this.config.mcp.bearerToken) {
+            await this.startHttp(this.config.mcp.bearerToken);
+        }
+        else {
+            log.info('no bearerToken — skipping HTTP; use stdio transport');
+        }
+        log.info('started');
+    }
+    async stop() {
+        await this.stopHttp();
+    }
+    async startStdio() {
+        const transport = new StdioServerTransport();
+        await this.mcpServer.connect(transport);
+    }
+    // ── HTTP transport ─────────────────────────────────────────────────────────
+    async startHttp(bearerToken) {
+        const transport = new StreamableHTTPServerTransport({
+            sessionIdGenerator: () => crypto.randomUUID(),
+        });
+        await this.mcpServer.connect(transport);
+        const expectedHash = createHash('sha256').update(`Bearer ${bearerToken}`).digest();
+        this.httpServer = http.createServer(async (req, res) => {
+            res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');
+            res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Mcp-Session-Id, Authorization');
+            if (req.method === 'OPTIONS') {
+                res.writeHead(200);
+                res.end();
+                return;
+            }
+            // Timing-safe bearer token comparison (hash prevents length leakage)
+            const auth = req.headers.authorization ?? '';
+            const authHash = createHash('sha256').update(auth).digest();
+            if (!timingSafeEqual(authHash, expectedHash)) {
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Unauthorized' }));
+                return;
+            }
+            if (req.url === '/openapi.json' && req.method === 'GET') {
+                this.buildOpenApiSpec().then(spec => {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify(spec, null, 2));
+                }).catch(err => {
+                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: toMessage(err) }));
+                });
+                return;
+            }
+            if (!req.url?.startsWith(this.httpEndpointPath())) {
+                res.writeHead(404, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Not found' }));
+                return;
+            }
+            try {
+                await transport.handleRequest(req, res);
+            }
+            catch {
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Internal server error' }));
+                }
+            }
+        });
+        const host = this.httpHost();
+        const port = this.httpPort();
+        return new Promise((resolve) => {
+            this.httpServer.listen(port, host, () => {
+                log.info(`http listening on ${host}:${port}${this.httpEndpointPath()}`);
+                resolve();
+            });
+        });
+    }
+    stopHttp() {
+        return new Promise((resolve) => {
+            if (!this.httpServer)
+                return resolve();
+            this.httpServer.close(() => resolve());
+            this.httpServer = null;
+        });
+    }
+    // ── MCP handlers ───────────────────────────────────────────────────────────
+    setupHandlers() {
+        this.mcpServer.setRequestHandler(ListToolsRequestSchema, async () => {
+            const metadata = await this.bus.call('bus.search', {});
+            const tools = metadata.filter(isToolEvent);
+            return {
+                tools: tools.map(m => ({
+                    name: m.event,
+                    description: m.description,
+                    inputSchema: (m.schema?.params ?? {}),
+                })),
+            };
+        });
+        this.mcpServer.setRequestHandler(CallToolRequestSchema, async (request) => {
+            const { name, arguments: args } = request.params;
+            const sessionKey = args?.sessionKey || 'mcp:default';
+            // Check if event exists in bus and is a tool
+            const metadata = await this.bus.call('bus.inspect', { event: name });
+            if (!metadata || metadata.type !== 'tool') {
+                return {
+                    content: [{ type: 'text', text: `Unknown tool: ${name}` }],
+                    isError: true,
+                };
+            }
+            try {
+                const result = await this.bus.call(name, args);
+                // Convert result to MCP format
+                const resultText = result && typeof result === 'object' ? JSON.stringify(result) : String(result);
+                return { content: [{ type: 'text', text: resultText }], isError: false };
+            }
+            catch (err) {
+                return {
+                    content: [{ type: 'text', text: toMessage(err) }],
+                    isError: true,
+                };
+            }
+        });
+    }
+    async buildOpenApiSpec() {
+        const metadata = await this.bus.call('bus.search', {});
+        const tools = metadata.filter(isToolEvent);
+        const paths = {};
+        for (const m of tools) {
+            paths[`/tools/${m.event}`] = {
+                post: {
+                    operationId: m.event,
+                    summary: m.description,
+                    requestBody: {
+                        required: true,
+                        content: { 'application/json': { schema: m.schema?.params ?? {} } },
+                    },
+                    responses: {
+                        '200': {
+                            description: 'Tool result',
+                            content: {
+                                'application/json': {
+                                    schema: { $ref: '#/components/schemas/ToolResult' },
+                                },
+                            },
+                        },
+                    },
+                },
+            };
+        }
+        return {
+            openapi: '3.1.0',
+            info: { title: 'Vargos', version: VERSION, description: 'Vargos agent OS tool API' },
+            paths,
+            components: {
+                schemas: {
+                    ToolResult: {
+                        type: 'object',
+                        required: ['content'],
+                        properties: {
+                            content: {
+                                type: 'array',
+                                items: { type: 'object' },
+                            },
+                        },
+                    },
+                },
+            },
+        };
+    }
+}
+// ── Boot ───────────────────────────────────────────────────────────────────────
+export async function boot(bus) {
+    const config = await bus.call('config.get', {});
+    const svc = new McpEdge(bus, config);
+    await svc.start();
+    return { stop: () => svc.stop() };
+}
+//# sourceMappingURL=index.js.map

package/dist/edge/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../edge/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAEL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,oCAAoC,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAG/C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;AAEhC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,kFAAkF;AAElF,MAAM,OAAO,OAAO;IAKC;IACA;IALX,SAAS,CAAS;IAClB,UAAU,GAAuB,IAAI,CAAC;IAE9C,YACmB,GAAQ,EACR,MAAiB;QADjB,QAAG,GAAH,GAAG,CAAK;QACR,WAAM,GAAN,MAAM,CAAW;QAElC,IAAI,CAAC,SAAS,GAAG,IAAI,MAAM,CACzB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EACpC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;QACF,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,WAAW,CAAC;IAC7C,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,4DAA4D;IACpD,gBAAgB;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC9C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAClE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;IAED,8EAA8E;IAEtE,KAAK,CAAC,SAAS,CAAC,WAAmB;QACzC,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;YAClD,kBAAkB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE;SAC9C,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAExC,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAEnF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACrD,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;YACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,6CAA6C,CAAC,CAAC;YAE7F,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,qEAAqE;YACrE,MAAM,IAAI,GAAO,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,GAAG,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBACxD,IAAI,CAAC,gBAAgB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAClC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;oBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrD,CAAC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;gBAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,UAAW,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;gBACvC,GAAG,CAAC,IAAI,CAAC,qBAAqB,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBACxE,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ;QACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,OAAO,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,8EAA8E;IAEtE,aAAa;QACnB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3C,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrB,IAAI,EAAS,CAAC,CAAC,KAAK;oBACpB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAA4B;iBACjE,CAAC,CAAC;aACJ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAA2B,EAAE;YACjG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YACjD,MAAM,UAAU,GAAI,IAAgC,EAAE,UAAoB,IAAI,aAAa,CAAC;YAE5F,6CAA6C;YAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1C,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAa,EAAE,IAAI,CAAC,CAAC;gBACxD,+BAA+B;gBAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC3E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,KAAK,GAA4B,EAAE,CAAC;QAE1C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG;gBAC3B,IAAI,EAAE;oBACJ,WAAW,EAAE,CAAC,CAAC,KAAK;oBACpB,OAAO,EAAM,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE;wBACX,QAAQ,EAAE,IAAI;wBACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE;qBACpE;oBACD,SAAS,EAAE;wBACT,KAAK,EAAE;4BACL,WAAW,EAAE,aAAa;4BAC1B,OAAO,EAAE;gCACP,kBAAkB,EAAE;oCAClB,MAAM,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;iCACpD;6BACF;yBACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,IAAI,EAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE;YACvF,KAAK;YACL,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,CAAC,SAAS,CAAC;wBACrB,UAAU,EAAE;4BACV,OAAO,EAAE;gCACP,IAAI,EAAE,OAAO;gCACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;6BAC1B;yBACF;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAED,kFAAkF;AAElF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAQ;IACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;AACpC,CAAC"}

package/dist/edge/webhooks/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Webhooks edge service — inbound HTTP webhooks that trigger agent runs.
+ *
+ * Callable: webhook.search
+ * Subscribes: agent.onCompleted (delivery to notify targets)
+ *
+ * Inbound flow: POST /hooks/:id → validate token → transform payload
+ *   → session create/addMessage → agent.execute → deliver to notify targets
+ */
+import type { Bus } from '../../gateway/bus.js';
+import type { EventMap } from '../../gateway/events.js';
+import type { AppConfig } from '../../services/config/index.js';
+export declare class WebhooksEdge {
+    private readonly bus;
+    private readonly config;
+    private hooks;
+    private activeHooks;
+    private server;
+    private unsubscribeCompleted?;
+    constructor(bus: Bus, config: AppConfig);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    search(params: EventMap['webhook.search']['params']): Promise<EventMap['webhook.search']['result']>;
+    private onAgentCompleted;
+    private startHttp;
+    private stopHttp;
+    private handleRequest;
+    private fireHook;
+}
+export declare function boot(bus: Bus): Promise<{
+    stop(): Promise<void>;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/edge/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../edge/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAgB,MAAM,gCAAgC,CAAC;AAiB9E,qBAAa,YAAY;IAOrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,KAAK,CAA4B;IACzC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,oBAAoB,CAAC,CAAa;gBAGvB,GAAG,EAAE,GAAG,EACR,MAAM,EAAE,SAAS;IAK9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAWtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC;IAazG,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,SAAS;IAajB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,aAAa;YA4EP,QAAQ;CA0BvB;AAID,wBAAsB,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;IAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CAKvE"}

package/dist/edge/webhooks/index.js

@@ -0,0 +1,231 @@
+/**
+ * Webhooks edge service — inbound HTTP webhooks that trigger agent runs.
+ *
+ * Callable: webhook.search
+ * Subscribes: agent.onCompleted (delivery to notify targets)
+ *
+ * Inbound flow: POST /hooks/:id → validate token → transform payload
+ *   → session create/addMessage → agent.execute → deliver to notify targets
+ */
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+import http from 'node:http';
+import { timingSafeEqual, createHash } from 'node:crypto';
+import { z } from 'zod';
+import { register } from '../../gateway/decorators.js';
+import { createLogger } from '../../lib/logger.js';
+import { toMessage } from '../../lib/error.js';
+import { getDataPaths } from '../../lib/paths.js';
+import { webhookSessionKey, parseSessionKey } from '../../lib/subagent.js';
+import { paginate } from '../../lib/paginate.js';
+import { passthroughTransform, loadTransform } from './transform.js';
+const log = createLogger('webhooks');
+const MAX_BODY = 1024 * 1024; // 1 MB
+const HOOK_ID_RE = /^[a-z0-9_-]+$/i;
+const HTTP_PORT = 9002;
+const HTTP_HOST = '127.0.0.1';
+// ── WebhooksEdge ──────────────────────────────────────────────────────────────
+let WebhooksEdge = (() => {
+    let _instanceExtraInitializers = [];
+    let _search_decorators;
+    return class WebhooksEdge {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
+            _search_decorators = [register('webhook.search', {
+                    description: 'List registered webhook endpoints.',
+                    schema: z.object({
+                        query: z.string().optional(),
+                        page: z.number(),
+                        limit: z.number().optional(),
+                    }),
+                })];
+            __esDecorate(this, null, _search_decorators, { kind: "method", name: "search", static: false, private: false, access: { has: obj => "search" in obj, get: obj => obj.search }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+        }
+        bus = __runInitializers(this, _instanceExtraInitializers);
+        config;
+        hooks;
+        activeHooks = new Set();
+        server = null;
+        unsubscribeCompleted;
+        constructor(bus, config) {
+            this.bus = bus;
+            this.config = config;
+            this.hooks = new Map(config.webhooks.map(h => [h.id, h]));
+        }
+        async start() {
+            this.unsubscribeCompleted = this.bus.on('agent.onCompleted', (payload) => this.onAgentCompleted(payload));
+            await this.startHttp();
+            this.bus.bootstrap(this);
+            log.info(`started with ${this.hooks.size} webhook(s) on ${HTTP_HOST}:${HTTP_PORT}`);
+        }
+        async stop() {
+            this.unsubscribeCompleted?.();
+            await this.stopHttp();
+        }
+        // ── Callable handler ─────────────────────────────────────────────────────
+        async search(params) {
+            // Strip tokens — never expose secrets
+            const all = Array.from(this.hooks.values()).map(({ id, name, transform, notify }) => ({ id, name, token: '', transform, notify }));
+            const filtered = params.query
+                ? all.filter(h => h.id.includes(params.query) || h.name.includes(params.query))
+                : all;
+            return paginate(filtered, params.page, params.limit ?? 20);
+        }
+        // ── Agent completed handler ───────────────────────────────────────────────
+        onAgentCompleted(payload) {
+            const parsed = parseSessionKey(payload.sessionKey);
+            if (parsed.type !== 'webhook')
+                return;
+            // webhookSessionKey format: "webhook:<hookId>:<timestamp>"
+            const hookId = parsed.id.replace(/:\d+$/, '');
+            this.activeHooks.delete(hookId);
+        }
+        // ── HTTP server ───────────────────────────────────────────────────────────
+        startHttp() {
+            return new Promise((resolve, reject) => {
+                this.server = http.createServer((req, res) => this.handleRequest(req, res));
+                this.server.headersTimeout = 10_000;
+                this.server.requestTimeout = 30_000;
+                this.server.on('error', reject);
+                this.server.listen(HTTP_PORT, HTTP_HOST, () => {
+                    log.info(`http listening on ${HTTP_HOST}:${HTTP_PORT}`);
+                    resolve();
+                });
+            });
+        }
+        stopHttp() {
+            const srv = this.server;
+            if (!srv)
+                return Promise.resolve();
+            this.server = null;
+            return new Promise(resolve => srv.close(() => resolve()));
+        }
+        // ── Request handling ──────────────────────────────────────────────────────
+        handleRequest(req, res) {
+            if (req.method !== 'POST' || !req.url?.startsWith('/hooks/')) {
+                res.writeHead(404, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Not found' }));
+                return;
+            }
+            const hookId = req.url.slice('/hooks/'.length).split('?')[0];
+            if (!HOOK_ID_RE.test(hookId)) {
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Invalid hook ID' }));
+                return;
+            }
+            const hook = this.hooks.get(hookId);
+            if (!hook) {
+                res.writeHead(404, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Unknown hook' }));
+                return;
+            }
+            // Timing-safe comparison (hash prevents length leakage)
+            const auth = req.headers.authorization ?? '';
+            const expectedHash = createHash('sha256').update(`Bearer ${hook.token}`).digest();
+            const authHash = createHash('sha256').update(auth).digest();
+            if (!timingSafeEqual(authHash, expectedHash)) {
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Unauthorized' }));
+                return;
+            }
+            const chunks = [];
+            let size = 0;
+            let destroyed = false;
+            req.on('error', () => {
+                if (!res.writableEnded) {
+                    res.writeHead(400, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Request error' }));
+                }
+            });
+            req.on('data', (chunk) => {
+                if (destroyed)
+                    return;
+                size += chunk.length;
+                if (size > MAX_BODY) {
+                    destroyed = true;
+                    req.destroy();
+                    res.writeHead(413, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Payload too large' }));
+                    return;
+                }
+                chunks.push(chunk);
+            });
+            req.on('end', () => {
+                if (res.writableEnded)
+                    return;
+                // Respond immediately — fire and forget
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ ok: true }));
+                let payload;
+                try {
+                    payload = JSON.parse(Buffer.concat(chunks).toString());
+                }
+                catch {
+                    payload = {};
+                }
+                this.fireHook(hook, payload).catch(err => log.error(`fire hook ${hookId}: ${toMessage(err)}`));
+            });
+        }
+        // ── Fire ──────────────────────────────────────────────────────────────────
+        async fireHook(hook, payload) {
+            const { dataDir } = getDataPaths();
+            const task = hook.transform
+                ? await loadTransform(hook.transform, dataDir).then(fn => fn(payload))
+                : passthroughTransform(payload);
+            const sessionKey = webhookSessionKey(hook.id);
+            log.info(`fired: ${hook.id} → ${sessionKey}`);
+            this.activeHooks.add(hook.id);
+            const result = await this.bus.call('agent.execute', { sessionKey, task });
+            if (result.response && hook.notify?.length) {
+                log.info(`${hook.id} delivering response to ${hook.notify.length} targets`);
+                await Promise.all(hook.notify.map(target => this.bus.call('channel.send', {
+                    sessionKey: target,
+                    text: result.response,
+                    fromSessionKey: sessionKey,
+                }).catch(err => log.error(`notify send to ${target}: ${toMessage(err)}`))));
+            }
+        }
+    };
+})();
+export { WebhooksEdge };
+// ── Boot ───────────────────────────────────────────────────────────────────────
+export async function boot(bus) {
+    const config = await bus.call('config.get', {});
+    const svc = new WebhooksEdge(bus, config);
+    await svc.start();
+    return { stop: () => svc.stop() };
+}
+//# sourceMappingURL=index.js.map

package/dist/edge/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../edge/webhooks/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAIvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAErE,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;AAErC,MAAM,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AACrC,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,SAAS,GAAG,WAAW,CAAC;AAE9B,iFAAiF;IAEpE,YAAY;;;iBAAZ,YAAY;;;kCA+BtB,QAAQ,CAAC,gBAAgB,EAAE;oBAC1B,WAAW,EAAE,oCAAoC;oBACjD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;wBACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;wBAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;wBAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;qBAC7B,CAAC;iBACH,CAAC;YACF,qKAAM,MAAM,6DASX;;;QAzCkB,GAAG,GAPX,mDAAY;QAQJ,MAAM;QAPjB,KAAK,CAA4B;QACjC,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,MAAM,GAAuB,IAAI,CAAC;QAClC,oBAAoB,CAAc;QAE1C,YACmB,GAAQ,EACR,MAAiB;YADjB,QAAG,GAAH,GAAG,CAAK;YACR,WAAM,GAAN,MAAM,CAAW;YAElC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CACrC,mBAAmB,EACnB,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAC5C,CAAC;YAEF,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QAED,4EAA4E;QAU5E,KAAK,CAAC,MAAM,CAAC,MAA4C;YACvD,sCAAsC;YACtC,MAAM,GAAG,GAAmB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAC7D,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAClF,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK;gBAC3B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;gBACjF,CAAC,CAAC,GAAG,CAAC;YACR,OAAO,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,6EAA6E;QAErE,gBAAgB,CAAC,OAAsC;YAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO;YACtC,2DAA2D;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,6EAA6E;QAErE,SAAS;YACf,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC5E,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;gBACpC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE;oBAC5C,GAAG,CAAC,IAAI,CAAC,qBAAqB,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;oBACxD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAEO,QAAQ;YACd,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;YACxB,IAAI,CAAC,GAAG;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,6EAA6E;QAErE,aAAa,CAAC,GAAyB,EAAE,GAAwB;YACvE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,wDAAwD;YACxD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;YACb,IAAI,SAAS,GAAG,KAAK,CAAC;YAEtB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;oBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,IAAI,SAAS;oBAAE,OAAO;gBACtB,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBACrB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;oBACpB,SAAS,GAAG,IAAI,CAAC;oBACjB,GAAG,CAAC,OAAO,EAAE,CAAC;oBACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,GAAG,CAAC,aAAa;oBAAE,OAAO;gBAC9B,wCAAwC;gBACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;gBAEtC,IAAI,OAAgB,CAAC;gBACrB,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,GAAG,EAAE,CAAC;gBACf,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CACvC,GAAG,CAAC,KAAK,CAAC,aAAa,MAAM,KAAK,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CACpD,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAED,6EAA6E;QAErE,KAAK,CAAC,QAAQ,CAAC,IAAkB,EAAE,OAAgB;YACzD,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;YAEnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS;gBACzB,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;gBACtE,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE9C,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,MAAM,UAAU,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1E,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,2BAA2B,IAAI,CAAC,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC;gBAE5E,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE;oBAC5B,UAAU,EAAE,MAAM;oBAClB,IAAI,EAAE,MAAM,CAAC,QAAQ;oBACrB,cAAc,EAAE,UAAU;iBAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,MAAM,KAAK,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAC1E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;;;SAzLU,YAAY;AA4LzB,kFAAkF;AAElF,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAQ;IACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;AACpC,CAAC"}

package/dist/edge/webhooks/transform.d.ts

@@ -0,0 +1,8 @@
+export type TransformFn = (payload: unknown) => string;
+export declare function passthroughTransform(payload: unknown): string;
+/**
+ * Load a transform module. Path must resolve within baseDir.
+ * Caches loaded modules to avoid re-importing.
+ */
+export declare function loadTransform(modulePath: string, baseDir?: string): Promise<TransformFn>;
+//# sourceMappingURL=transform.d.ts.map

package/dist/edge/webhooks/transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.d.ts","sourceRoot":"","sources":["../../../edge/webhooks/transform.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;AAIvD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAE7D;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAmB9F"}

package/dist/edge/webhooks/transform.js

@@ -0,0 +1,29 @@
+import path from 'node:path';
+const cache = new Map();
+export function passthroughTransform(payload) {
+    return JSON.stringify(payload, null, 2);
+}
+/**
+ * Load a transform module. Path must resolve within baseDir.
+ * Caches loaded modules to avoid re-importing.
+ */
+export async function loadTransform(modulePath, baseDir) {
+    const cached = cache.get(modulePath);
+    if (cached)
+        return cached;
+    // Restrict to baseDir (dataDir) when provided
+    if (baseDir) {
+        const resolved = path.resolve(baseDir, modulePath);
+        if (!resolved.startsWith(path.resolve(baseDir))) {
+            throw new Error(`Transform path "${modulePath}" escapes data directory`);
+        }
+    }
+    const mod = await import(modulePath);
+    const fn = mod.default ?? mod.transform;
+    if (typeof fn !== 'function') {
+        throw new Error(`Transform module "${modulePath}" must export a function`);
+    }
+    cache.set(modulePath, fn);
+    return fn;
+}
+//# sourceMappingURL=transform.js.map

package/dist/edge/webhooks/transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../../edge/webhooks/transform.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;AAE7C,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAkB,EAAE,OAAgB;IACtE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,8CAA8C;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,mBAAmB,UAAU,0BAA0B,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,GAAgB,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC;IACrD,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,UAAU,0BAA0B,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC;AACZ,CAAC"}