@cluesmith/codev 2.0.0-rc.72 → 2.0.0-rc.73

package/dist/agent-farm/servers/tower-tunnel.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Cloud tunnel management for tower server.
+ * Spec 0105: Tower Server Decomposition — Phase 2
+ *
+ * Contains: tunnel client lifecycle, config file watching,
+ * metadata refresh, and tunnel API endpoint handling.
+ */
+import http from 'node:http';
+import type { ProjectTerminals, InstanceStatus } from './tower-types.js';
+import type { TerminalManager } from '../../terminal/pty-manager.js';
+/** Minimal dependencies required by the tunnel module */
+export interface TunnelDeps {
+    port: number;
+    log: (level: 'INFO' | 'ERROR' | 'WARN', message: string) => void;
+    projectTerminals: Map<string, ProjectTerminals>;
+    terminalManager: TerminalManager | null;
+}
+/**
+ * Initialize the tunnel module. Reads cloud config and connects if registered.
+ * Starts config file watcher for credential changes.
+ */
+export declare function initTunnel(deps: TunnelDeps, callbacks: {
+    getInstances: () => Promise<InstanceStatus[]>;
+}): Promise<void>;
+/**
+ * Shut down the tunnel module. Disconnects client, stops watchers.
+ */
+export declare function shutdownTunnel(): void;
+/**
+ * Handle tunnel management endpoints (Spec 0097 Phase 4).
+ * Dispatches /api/tunnel/{connect,disconnect,status} requests.
+ */
+export declare function handleTunnelEndpoint(req: http.IncomingMessage, res: http.ServerResponse, tunnelSub: string): Promise<void>;
+//# sourceMappingURL=tower-tunnel.d.ts.map

package/dist/agent-farm/servers/tower-tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-tunnel.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/tower-tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAErE,yDAAyD;AACzD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;CACzC;AA+LD;;;GAGG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE;IAAE,YAAY,EAAE,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;CAAE,GAC3D,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,IAAI,CAUrC;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAwEf"}

package/dist/agent-farm/servers/tower-tunnel.js

@@ -0,0 +1,299 @@
+/**
+ * Cloud tunnel management for tower server.
+ * Spec 0105: Tower Server Decomposition — Phase 2
+ *
+ * Contains: tunnel client lifecycle, config file watching,
+ * metadata refresh, and tunnel API endpoint handling.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { TunnelClient } from '../lib/tunnel-client.js';
+import { readCloudConfig, getCloudConfigPath, maskApiKey } from '../lib/cloud-config.js';
+// ============================================================================
+// Module-private state (lifecycle driven by orchestrator)
+// ============================================================================
+let tunnelClient = null;
+let configWatcher = null;
+let configWatchDebounce = null;
+let metadataRefreshInterval = null;
+const METADATA_REFRESH_MS = 30_000;
+/** Stored references set by initTunnel() */
+let _deps = null;
+let _getInstances = null;
+// ============================================================================
+// Internal functions
+// ============================================================================
+/**
+ * Gather current tower metadata (projects + terminals) for codevos.ai.
+ */
+async function gatherMetadata() {
+    if (!_deps || !_getInstances)
+        throw new Error('Tunnel not initialized');
+    const instances = await _getInstances();
+    const projects = instances.map((i) => ({
+        path: i.projectPath,
+        name: i.projectName,
+    }));
+    // Build reverse mapping: terminal ID → project path
+    const terminalToProject = new Map();
+    for (const [projectPath, entry] of _deps.projectTerminals) {
+        if (entry.architect)
+            terminalToProject.set(entry.architect, projectPath);
+        for (const termId of entry.builders.values())
+            terminalToProject.set(termId, projectPath);
+        for (const termId of entry.shells.values())
+            terminalToProject.set(termId, projectPath);
+    }
+    const manager = _deps.terminalManager;
+    const terminals = [];
+    if (manager) {
+        for (const session of manager.listSessions()) {
+            terminals.push({
+                id: session.id,
+                projectPath: terminalToProject.get(session.id) ?? '',
+            });
+        }
+    }
+    return { projects, terminals };
+}
+/**
+ * Start periodic metadata refresh — re-gathers metadata and pushes to codevos.ai
+ * every METADATA_REFRESH_MS while the tunnel is connected.
+ */
+function startMetadataRefresh() {
+    stopMetadataRefresh();
+    metadataRefreshInterval = setInterval(async () => {
+        try {
+            if (tunnelClient && tunnelClient.getState() === 'connected') {
+                const metadata = await gatherMetadata();
+                tunnelClient.sendMetadata(metadata);
+            }
+        }
+        catch (err) {
+            _deps?.log('WARN', `Metadata refresh failed: ${err.message}`);
+        }
+    }, METADATA_REFRESH_MS);
+}
+/**
+ * Stop the periodic metadata refresh.
+ */
+function stopMetadataRefresh() {
+    if (metadataRefreshInterval) {
+        clearInterval(metadataRefreshInterval);
+        metadataRefreshInterval = null;
+    }
+}
+/**
+ * Create or reconnect the tunnel client using the given config.
+ * Sets up state change listeners and sends initial metadata.
+ */
+async function connectTunnel(config) {
+    if (!_deps)
+        throw new Error('Tunnel not initialized');
+    // Disconnect existing client if any
+    if (tunnelClient) {
+        tunnelClient.disconnect();
+    }
+    const client = new TunnelClient({
+        serverUrl: config.server_url,
+        apiKey: config.api_key,
+        towerId: config.tower_id,
+        localPort: _deps.port,
+    });
+    client.onStateChange((state, prev) => {
+        _deps.log('INFO', `Tunnel: ${prev} → ${state}`);
+        if (state === 'connected') {
+            startMetadataRefresh();
+        }
+        else if (prev === 'connected') {
+            stopMetadataRefresh();
+        }
+        if (state === 'auth_failed') {
+            _deps.log('ERROR', 'Cloud connection failed: API key is invalid or revoked. Run \'af tower register --reauth\' to update credentials.');
+        }
+    });
+    // Gather and set initial metadata before connecting
+    const metadata = await gatherMetadata();
+    client.sendMetadata(metadata);
+    tunnelClient = client;
+    client.connect();
+    // Ensure config watcher is running — the config directory now exists.
+    startConfigWatcher();
+    return client;
+}
+/**
+ * Start watching cloud-config.json for changes.
+ * On change: reconnect with new credentials.
+ * On delete: disconnect tunnel.
+ */
+function startConfigWatcher() {
+    stopConfigWatcher();
+    const configPath = getCloudConfigPath();
+    const configDir = path.dirname(configPath);
+    const configFile = path.basename(configPath);
+    // Watch the directory (more reliable than watching the file directly)
+    try {
+        configWatcher = fs.watch(configDir, (eventType, filename) => {
+            if (filename !== configFile)
+                return;
+            // Debounce: multiple events fire for a single write
+            if (configWatchDebounce)
+                clearTimeout(configWatchDebounce);
+            configWatchDebounce = setTimeout(async () => {
+                configWatchDebounce = null;
+                try {
+                    const config = readCloudConfig();
+                    if (config) {
+                        _deps?.log('INFO', `Cloud config changed, reconnecting tunnel (key: ${maskApiKey(config.api_key)})`);
+                        // Reset circuit breaker in case previous key was invalid
+                        if (tunnelClient)
+                            tunnelClient.resetCircuitBreaker();
+                        await connectTunnel(config);
+                    }
+                    else {
+                        // Config deleted or invalid
+                        _deps?.log('INFO', 'Cloud config removed or invalid, disconnecting tunnel');
+                        if (tunnelClient) {
+                            tunnelClient.disconnect();
+                            tunnelClient = null;
+                        }
+                    }
+                }
+                catch (err) {
+                    _deps?.log('WARN', `Error handling config change: ${err.message}`);
+                }
+            }, 500);
+        });
+    }
+    catch {
+        // Directory doesn't exist yet — that's fine, user hasn't registered
+    }
+}
+/**
+ * Stop watching cloud-config.json.
+ */
+function stopConfigWatcher() {
+    if (configWatcher) {
+        configWatcher.close();
+        configWatcher = null;
+    }
+    if (configWatchDebounce) {
+        clearTimeout(configWatchDebounce);
+        configWatchDebounce = null;
+    }
+}
+// ============================================================================
+// Public API (called by orchestrator)
+// ============================================================================
+/**
+ * Initialize the tunnel module. Reads cloud config and connects if registered.
+ * Starts config file watcher for credential changes.
+ */
+export async function initTunnel(deps, callbacks) {
+    _deps = deps;
+    _getInstances = callbacks.getInstances;
+    // Auto-connect tunnel if registered
+    try {
+        const config = readCloudConfig();
+        if (config) {
+            deps.log('INFO', `Cloud config found, connecting tunnel (tower: ${config.tower_name}, key: ${maskApiKey(config.api_key)})`);
+            await connectTunnel(config);
+        }
+        else {
+            deps.log('INFO', 'No cloud config found, operating in local-only mode');
+        }
+    }
+    catch (err) {
+        deps.log('WARN', `Failed to read cloud config: ${err.message}. Operating in local-only mode.`);
+    }
+    // Start watching cloud-config.json for changes
+    startConfigWatcher();
+}
+/**
+ * Shut down the tunnel module. Disconnects client, stops watchers.
+ */
+export function shutdownTunnel() {
+    stopMetadataRefresh();
+    stopConfigWatcher();
+    if (tunnelClient) {
+        _deps?.log('INFO', 'Disconnecting tunnel...');
+        tunnelClient.disconnect();
+        tunnelClient = null;
+    }
+    _deps = null;
+    _getInstances = null;
+}
+/**
+ * Handle tunnel management endpoints (Spec 0097 Phase 4).
+ * Dispatches /api/tunnel/{connect,disconnect,status} requests.
+ */
+export async function handleTunnelEndpoint(req, res, tunnelSub) {
+    // POST connect
+    if (req.method === 'POST' && tunnelSub === 'connect') {
+        if (!_deps) {
+            // Module not initialized yet (server still starting up)
+            res.writeHead(503, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Tower is still starting up. Try again shortly.' }));
+            return;
+        }
+        try {
+            const config = readCloudConfig();
+            if (!config) {
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ success: false, error: 'Not registered. Run \'af tower register\' first.' }));
+                return;
+            }
+            if (tunnelClient)
+                tunnelClient.resetCircuitBreaker();
+            const client = await connectTunnel(config);
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: true, state: client.getState() }));
+        }
+        catch (err) {
+            _deps?.log('ERROR', `Tunnel connect failed: ${err.message}`);
+            res.writeHead(500, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: err.message }));
+        }
+        return;
+    }
+    // POST disconnect
+    if (req.method === 'POST' && tunnelSub === 'disconnect') {
+        if (tunnelClient) {
+            tunnelClient.disconnect();
+            tunnelClient = null;
+        }
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ success: true }));
+        return;
+    }
+    // GET status
+    if (req.method === 'GET' && tunnelSub === 'status') {
+        let config = null;
+        try {
+            config = readCloudConfig();
+        }
+        catch {
+            // Config file may be corrupted — treat as unregistered
+        }
+        const state = tunnelClient?.getState() ?? 'disconnected';
+        const uptime = tunnelClient?.getUptime() ?? null;
+        const response = {
+            registered: config !== null,
+            state,
+            uptime,
+        };
+        if (config) {
+            response.towerId = config.tower_id;
+            response.towerName = config.tower_name;
+            response.serverUrl = config.server_url;
+            response.accessUrl = `${config.server_url}/t/${config.tower_name}/`;
+        }
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify(response));
+        return;
+    }
+    // Unknown tunnel endpoint
+    res.writeHead(404, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: 'Not found' }));
+}
+//# sourceMappingURL=tower-tunnel.js.map

package/dist/agent-farm/servers/tower-tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-tunnel.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/tower-tunnel.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,EAAwC,MAAM,yBAAyB,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAoB,MAAM,wBAAwB,CAAC;AAY3G,+EAA+E;AAC/E,0DAA0D;AAC1D,+EAA+E;AAE/E,IAAI,YAAY,GAAwB,IAAI,CAAC;AAC7C,IAAI,aAAa,GAAwB,IAAI,CAAC;AAC9C,IAAI,mBAAmB,GAAyC,IAAI,CAAC;AACrE,IAAI,uBAAuB,GAA0C,IAAI,CAAC;AAE1E,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,4CAA4C;AAC5C,IAAI,KAAK,GAAsB,IAAI,CAAC;AACpC,IAAI,aAAa,GAA6C,IAAI,CAAC;AAEnE,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;GAEG;AACH,KAAK,UAAU,cAAc;IAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAExE,MAAM,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,CAAC,CAAC,WAAW;QACnB,IAAI,EAAE,CAAC,CAAC,WAAW;KACpB,CAAC,CAAC,CAAC;IAEJ,oDAAoD;IACpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC1D,IAAI,KAAK,CAAC,SAAS;YAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QACzF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC;IACtC,MAAM,SAAS,GAA+B,EAAE,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YAC7C,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;aACrD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB;IAC3B,mBAAmB,EAAE,CAAC;IACtB,uBAAuB,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;QAC/C,IAAI,CAAC;YACH,IAAI,YAAY,IAAI,YAAY,CAAC,QAAQ,EAAE,KAAK,WAAW,EAAE,CAAC;gBAC5D,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;gBACxC,YAAY,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB;IAC1B,IAAI,uBAAuB,EAAE,CAAC;QAC5B,aAAa,CAAC,uBAAuB,CAAC,CAAC;QACvC,uBAAuB,GAAG,IAAI,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,aAAa,CAAC,MAAmB;IAC9C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAEtD,oCAAoC;IACpC,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,UAAU,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;QAC9B,SAAS,EAAE,MAAM,CAAC,UAAU;QAC5B,MAAM,EAAE,MAAM,CAAC,OAAO;QACtB,OAAO,EAAE,MAAM,CAAC,QAAQ;QACxB,SAAS,EAAE,KAAK,CAAC,IAAI;KACtB,CAAC,CAAC;IAEH,MAAM,CAAC,aAAa,CAAC,CAAC,KAAkB,EAAE,IAAiB,EAAE,EAAE;QAC7D,KAAM,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC1B,oBAAoB,EAAE,CAAC;QACzB,CAAC;aAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,mBAAmB,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,KAAM,CAAC,GAAG,CAAC,OAAO,EAAE,mHAAmH,CAAC,CAAC;QAC3I,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,oDAAoD;IACpD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;IACxC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAE9B,YAAY,GAAG,MAAM,CAAC;IACtB,MAAM,CAAC,OAAO,EAAE,CAAC;IAEjB,sEAAsE;IACtE,kBAAkB,EAAE,CAAC;IAErB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB;IACzB,iBAAiB,EAAE,CAAC;IAEpB,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAE7C,sEAAsE;IACtE,IAAI,CAAC;QACH,aAAa,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;YAC1D,IAAI,QAAQ,KAAK,UAAU;gBAAE,OAAO;YAEpC,oDAAoD;YACpD,IAAI,mBAAmB;gBAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC;YAC3D,mBAAmB,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;gBAC1C,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;oBACjC,IAAI,MAAM,EAAE,CAAC;wBACX,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,mDAAmD,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBACrG,yDAAyD;wBACzD,IAAI,YAAY;4BAAE,YAAY,CAAC,mBAAmB,EAAE,CAAC;wBACrD,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC9B,CAAC;yBAAM,CAAC;wBACN,4BAA4B;wBAC5B,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,uDAAuD,CAAC,CAAC;wBAC5E,IAAI,YAAY,EAAE,CAAC;4BACjB,YAAY,CAAC,UAAU,EAAE,CAAC;4BAC1B,YAAY,GAAG,IAAI,CAAC;wBACtB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;IACtE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB;IACxB,IAAI,aAAa,EAAE,CAAC;QAClB,aAAa,CAAC,KAAK,EAAE,CAAC;QACtB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,mBAAmB,EAAE,CAAC;QACxB,YAAY,CAAC,mBAAmB,CAAC,CAAC;QAClC,mBAAmB,GAAG,IAAI,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,sCAAsC;AACtC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAgB,EAChB,SAA4D;IAE5D,KAAK,GAAG,IAAI,CAAC;IACb,aAAa,GAAG,SAAS,CAAC,YAAY,CAAC;IAEvC,oCAAoC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,iDAAiD,MAAM,CAAC,UAAU,UAAU,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5H,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,qDAAqD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,gCAAiC,GAAa,CAAC,OAAO,iCAAiC,CAAC,CAAC;IAC5G,CAAC;IAED,+CAA+C;IAC/C,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc;IAC5B,mBAAmB,EAAE,CAAC;IACtB,iBAAiB,EAAE,CAAC;IACpB,IAAI,YAAY,EAAE,CAAC;QACjB,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC9C,YAAY,CAAC,UAAU,EAAE,CAAC;QAC1B,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,KAAK,GAAG,IAAI,CAAC;IACb,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAyB,EACzB,GAAwB,EACxB,SAAiB;IAEjB,eAAe;IACf,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wDAAwD;YACxD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC,CAAC;gBACvG,OAAO;YACT,CAAC;YACD,IAAI,YAAY;gBAAE,YAAY,CAAC,mBAAmB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QACxD,IAAI,YAAY,EAAE,CAAC;YACjB,YAAY,CAAC,UAAU,EAAE,CAAC;YAC1B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,aAAa;IACb,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnD,IAAI,MAAM,GAAuB,IAAI,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,EAAE,QAAQ,EAAE,IAAI,cAAc,CAAC;QACzD,MAAM,MAAM,GAAG,YAAY,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC;QAEjD,MAAM,QAAQ,GAA4B;YACxC,UAAU,EAAE,MAAM,KAAK,IAAI;YAC3B,KAAK;YACL,MAAM;SACP,CAAC;QAEF,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC;YACnC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;YACvC,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;YACvC,QAAQ,CAAC,SAAS,GAAG,GAAG,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,UAAU,GAAG,CAAC;QACtE,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,0BAA0B;IAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/agent-farm/servers/tower-types.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Shared types for tower server modules.
+ * Spec 0105: Tower Server Decomposition
+ */
+import type http from 'node:http';
+import type { WebSocketServer } from 'ws';
+import type Database from 'better-sqlite3';
+import type { TerminalManager } from '../../terminal/pty-manager.js';
+import type { SessionManager } from '../../terminal/session-manager.js';
+import type { GateWatcher } from '../utils/gate-watcher.js';
+import type { TunnelClient } from '../lib/tunnel-client.js';
+import type { FileTab } from '../utils/file-tabs.js';
+import type { GateStatus } from '../utils/gate-status.js';
+/**
+ * Shared context passed to all tower modules.
+ * The orchestrator (tower-server.ts) owns lifecycle — it creates
+ * dependencies in startup order and tears them down in gracefulShutdown.
+ */
+export interface TowerContext {
+    port: number;
+    log: (level: 'INFO' | 'ERROR' | 'WARN', message: string) => void;
+    terminalManager: TerminalManager;
+    shepherdManager: SessionManager | null;
+    projectTerminals: Map<string, ProjectTerminals>;
+    db: () => Database.Database;
+    gateWatcher: GateWatcher;
+    broadcastNotification: (n: {
+        type: string;
+        title: string;
+        body: string;
+        project?: string;
+    }) => void;
+    tunnelClient: TunnelClient | null;
+    knownProjects: Set<string>;
+    server: http.Server;
+    terminalWss: WebSocketServer;
+}
+/** Tracks terminals belonging to a project */
+export interface ProjectTerminals {
+    architect?: string;
+    builders: Map<string, string>;
+    shells: Map<string, string>;
+    fileTabs: Map<string, FileTab>;
+}
+/** SSE client connection for push notifications */
+export interface SSEClient {
+    res: http.ServerResponse;
+    id: string;
+}
+/** Rate limiting entry for activation requests */
+export interface RateLimitEntry {
+    count: number;
+    windowStart: number;
+}
+/** Terminal entry returned to tower UI */
+export interface TerminalEntry {
+    type: 'architect' | 'builder' | 'shell' | 'file';
+    id: string;
+    label: string;
+    url: string;
+    active: boolean;
+}
+/** Instance status returned to tower UI */
+export interface InstanceStatus {
+    projectPath: string;
+    projectName: string;
+    running: boolean;
+    proxyUrl: string;
+    architectUrl: string;
+    terminals: TerminalEntry[];
+    gateStatus?: GateStatus;
+}
+/** SQLite terminal session row shape */
+export interface DbTerminalSession {
+    id: string;
+    project_path: string;
+    type: 'architect' | 'builder' | 'shell';
+    role_id: string | null;
+    pid: number | null;
+    shepherd_socket: string | null;
+    shepherd_pid: number | null;
+    shepherd_start_time: number | null;
+    created_at: string;
+}
+//# sourceMappingURL=tower-types.d.ts.map

package/dist/agent-farm/servers/tower-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-types.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/tower-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjE,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,cAAc,GAAG,IAAI,CAAC;IACvC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAChD,EAAE,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC;IAC5B,WAAW,EAAE,WAAW,CAAC;IACzB,qBAAqB,EAAE,CAAC,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpG,YAAY,EAAE,YAAY,GAAG,IAAI,CAAC;IAClC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;IACpB,WAAW,EAAE,eAAe,CAAC;CAC9B;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC;IACzB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,kDAAkD;AAClD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,WAAW,GAAG,SAAS,GAAG,OAAO,CAAC;IACxC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/agent-farm/servers/tower-types.js

@@ -0,0 +1,6 @@
+/**
+ * Shared types for tower server modules.
+ * Spec 0105: Tower Server Decomposition
+ */
+export {};
+//# sourceMappingURL=tower-types.js.map

package/dist/agent-farm/servers/tower-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-types.js","sourceRoot":"","sources":["../../../src/agent-farm/servers/tower-types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/agent-farm/servers/tower-utils.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Utility functions for tower server.
+ * Spec 0105: Tower Server Decomposition — Phase 1
+ *
+ * Contains: rate limiting, path normalization, temp directory detection,
+ * project name extraction, MIME types, and static file serving.
+ */
+import type { ServerResponse } from 'node:http';
+/**
+ * Check if a client has exceeded the rate limit for activations.
+ * Returns true if rate limit exceeded, false if allowed.
+ */
+export declare function isRateLimited(clientIp: string): boolean;
+/**
+ * Clean up old rate limit entries.
+ */
+export declare function cleanupRateLimits(): void;
+/**
+ * Start periodic cleanup of stale rate limit entries.
+ * Returns the interval handle so the orchestrator can clear it on shutdown.
+ */
+export declare function startRateLimitCleanup(): ReturnType<typeof setInterval>;
+/**
+ * Normalize a project path to its canonical form for consistent SQLite storage.
+ * Uses realpath to resolve symlinks and relative paths.
+ */
+export declare function normalizeProjectPath(projectPath: string): string;
+/**
+ * Get project name from path.
+ */
+export declare function getProjectName(projectPath: string): string;
+/**
+ * Check if a project path points to a temp directory.
+ */
+export declare function isTempDirectory(projectPath: string): boolean;
+/**
+ * Get language identifier for syntax highlighting.
+ */
+export declare function getLanguageForExt(ext: string): string;
+/**
+ * Get MIME type for a file path (by extension).
+ */
+export declare function getMimeTypeForFile(filePath: string): string;
+/** MIME types for static file serving */
+export declare const MIME_TYPES: Record<string, string>;
+/**
+ * Serve a static file from the React dashboard dist.
+ * Returns true if the file was served, false otherwise.
+ */
+export declare function serveStaticFile(filePath: string, res: ServerResponse): boolean;
+//# sourceMappingURL=tower-utils.d.ts.map

package/dist/agent-farm/servers/tower-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-utils.d.ts","sourceRoot":"","sources":["../../../src/agent-farm/servers/tower-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAYhD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAgBvD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAOxC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,UAAU,CAAC,OAAO,WAAW,CAAC,CAEtE;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAOhE;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1D;AAYD;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAO5D;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQrD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAS3D;AAMD,yCAAyC;AACzC,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAc7C,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAgB9E"}

package/dist/agent-farm/servers/tower-utils.js

@@ -0,0 +1,161 @@
+/**
+ * Utility functions for tower server.
+ * Spec 0105: Tower Server Decomposition — Phase 1
+ *
+ * Contains: rate limiting, path normalization, temp directory detection,
+ * project name extraction, MIME types, and static file serving.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { tmpdir } from 'node:os';
+// ============================================================================
+// Rate Limiting
+// ============================================================================
+const RATE_LIMIT_WINDOW_MS = 60 * 1000; // 1 minute
+const RATE_LIMIT_MAX = 10;
+const activationRateLimits = new Map();
+/**
+ * Check if a client has exceeded the rate limit for activations.
+ * Returns true if rate limit exceeded, false if allowed.
+ */
+export function isRateLimited(clientIp) {
+    const now = Date.now();
+    const entry = activationRateLimits.get(clientIp);
+    if (!entry || now - entry.windowStart >= RATE_LIMIT_WINDOW_MS) {
+        // New window
+        activationRateLimits.set(clientIp, { count: 1, windowStart: now });
+        return false;
+    }
+    if (entry.count >= RATE_LIMIT_MAX) {
+        return true;
+    }
+    entry.count++;
+    return false;
+}
+/**
+ * Clean up old rate limit entries.
+ */
+export function cleanupRateLimits() {
+    const now = Date.now();
+    for (const [ip, entry] of activationRateLimits.entries()) {
+        if (now - entry.windowStart >= RATE_LIMIT_WINDOW_MS * 2) {
+            activationRateLimits.delete(ip);
+        }
+    }
+}
+/**
+ * Start periodic cleanup of stale rate limit entries.
+ * Returns the interval handle so the orchestrator can clear it on shutdown.
+ */
+export function startRateLimitCleanup() {
+    return setInterval(cleanupRateLimits, 5 * 60 * 1000);
+}
+// ============================================================================
+// Path Utilities
+// ============================================================================
+/**
+ * Normalize a project path to its canonical form for consistent SQLite storage.
+ * Uses realpath to resolve symlinks and relative paths.
+ */
+export function normalizeProjectPath(projectPath) {
+    try {
+        return fs.realpathSync(projectPath);
+    }
+    catch {
+        // Path doesn't exist yet, normalize without realpath
+        return path.resolve(projectPath);
+    }
+}
+/**
+ * Get project name from path.
+ */
+export function getProjectName(projectPath) {
+    return path.basename(projectPath);
+}
+// Resolve once at module load: both symlinked and real temp dir paths
+const _tmpDir = tmpdir();
+const _tmpDirResolved = (() => {
+    try {
+        return fs.realpathSync(_tmpDir);
+    }
+    catch {
+        return _tmpDir;
+    }
+})();
+/**
+ * Check if a project path points to a temp directory.
+ */
+export function isTempDirectory(projectPath) {
+    return (projectPath.startsWith(_tmpDir + '/') ||
+        projectPath.startsWith(_tmpDirResolved + '/') ||
+        projectPath.startsWith('/tmp/') ||
+        projectPath.startsWith('/private/tmp/'));
+}
+// ============================================================================
+// Language & MIME Detection
+// ============================================================================
+/**
+ * Get language identifier for syntax highlighting.
+ */
+export function getLanguageForExt(ext) {
+    const langMap = {
+        js: 'javascript', ts: 'typescript', jsx: 'javascript', tsx: 'typescript',
+        py: 'python', sh: 'bash', bash: 'bash', md: 'markdown',
+        html: 'markup', css: 'css', json: 'json', yaml: 'yaml', yml: 'yaml',
+        rs: 'rust', go: 'go', java: 'java', c: 'c', cpp: 'cpp', h: 'c',
+    };
+    return langMap[ext] || ext || 'plaintext';
+}
+/**
+ * Get MIME type for a file path (by extension).
+ */
+export function getMimeTypeForFile(filePath) {
+    const ext = path.extname(filePath).slice(1).toLowerCase();
+    const mimeTypes = {
+        png: 'image/png', jpg: 'image/jpeg', jpeg: 'image/jpeg',
+        gif: 'image/gif', webp: 'image/webp', svg: 'image/svg+xml',
+        mp4: 'video/mp4', webm: 'video/webm', mov: 'video/quicktime',
+        pdf: 'application/pdf', txt: 'text/plain',
+    };
+    return mimeTypes[ext] || 'application/octet-stream';
+}
+// ============================================================================
+// Static File Serving
+// ============================================================================
+/** MIME types for static file serving */
+export const MIME_TYPES = {
+    '.html': 'text/html',
+    '.js': 'application/javascript',
+    '.css': 'text/css',
+    '.json': 'application/json',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.svg': 'image/svg+xml',
+    '.ico': 'image/x-icon',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.ttf': 'font/ttf',
+    '.map': 'application/json',
+};
+/**
+ * Serve a static file from the React dashboard dist.
+ * Returns true if the file was served, false otherwise.
+ */
+export function serveStaticFile(filePath, res) {
+    if (!fs.existsSync(filePath)) {
+        return false;
+    }
+    const ext = path.extname(filePath);
+    const contentType = MIME_TYPES[ext] || 'application/octet-stream';
+    try {
+        const content = fs.readFileSync(filePath);
+        res.writeHead(200, { 'Content-Type': contentType });
+        res.end(content);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=tower-utils.js.map