@cogitator-ai/express 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Cogitator Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,346 @@
+# @cogitator-ai/express
+
+Express.js server adapter for Cogitator AI runtime. Automatically generates REST API endpoints for agents, workflows, and swarms with SSE streaming, WebSocket support, and Swagger documentation.
+
+## Installation
+
+```bash
+npm install @cogitator-ai/express express
+# or
+pnpm add @cogitator-ai/express express
+```
+
+## Quick Start
+
+```typescript
+import express from 'express';
+import { Cogitator, Agent, tool } from '@cogitator-ai/core';
+import { CogitatorServer } from '@cogitator-ai/express';
+
+const app = express();
+
+const cogitator = new Cogitator({
+  defaultBackend: 'openai',
+  backends: { openai: { apiKey: process.env.OPENAI_API_KEY } },
+});
+
+const chatAgent = new Agent({
+  name: 'chat',
+  instructions: 'You are a helpful assistant.',
+  model: 'gpt-4o-mini',
+});
+
+const server = new CogitatorServer({
+  app,
+  cogitator,
+  agents: { chat: chatAgent },
+  config: {
+    basePath: '/api',
+    enableSwagger: true,
+  },
+});
+
+await server.init();
+app.listen(3000, () => console.log('Server running on http://localhost:3000'));
+```
+
+## Auto-generated Endpoints
+
+### Agents
+
+```
+GET    /api/agents                    - List all agents
+POST   /api/agents/:name/run          - Run agent (JSON response)
+POST   /api/agents/:name/stream       - Run agent (SSE stream)
+```
+
+### Threads (Memory)
+
+```
+GET    /api/threads/:id               - Get thread messages
+POST   /api/threads/:id/messages      - Add message to thread
+DELETE /api/threads/:id               - Delete thread
+```
+
+### Workflows
+
+```
+GET    /api/workflows                 - List all workflows
+POST   /api/workflows/:name/run       - Run workflow
+POST   /api/workflows/:name/stream    - Stream workflow events
+```
+
+### Swarms
+
+```
+GET    /api/swarms                    - List all swarms
+POST   /api/swarms/:name/run          - Run swarm
+POST   /api/swarms/:name/stream       - Stream swarm events
+GET    /api/swarms/:name/blackboard   - Get shared state
+```
+
+### Tools & Docs
+
+```
+GET    /api/tools                     - List all tools
+GET    /api/health                    - Health check
+GET    /api/docs                      - Swagger UI
+GET    /api/openapi.json              - OpenAPI spec
+```
+
+## Configuration
+
+```typescript
+const server = new CogitatorServer({
+  app,
+  cogitator,
+  agents: { chat: chatAgent, research: researchAgent },
+  workflows: { 'code-review': codeReviewWorkflow },
+  swarms: { 'dev-team': devTeamSwarm },
+  config: {
+    basePath: '/cogitator',
+    enableWebSocket: true,
+    enableSwagger: true,
+
+    // Authentication
+    auth: async (req) => {
+      const token = req.headers.authorization?.replace('Bearer ', '');
+      const user = await validateToken(token);
+      return { userId: user.id, roles: user.roles };
+    },
+
+    // Rate limiting
+    rateLimit: {
+      windowMs: 60000, // 1 minute
+      max: 100, // 100 requests per window
+    },
+
+    // CORS
+    cors: {
+      origin: ['https://myapp.com'],
+      credentials: true,
+    },
+
+    // Swagger customization
+    swagger: {
+      title: 'My AI API',
+      description: 'AI-powered API endpoints',
+      version: '1.0.0',
+    },
+  },
+});
+```
+
+## SSE Streaming
+
+The `/agents/:name/stream` endpoint returns Server-Sent Events:
+
+```typescript
+// Client-side
+const response = await fetch('/api/agents/chat/stream', {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({ input: 'Hello!' }),
+});
+
+const reader = response.body.getReader();
+const decoder = new TextDecoder();
+
+while (true) {
+  const { done, value } = await reader.read();
+  if (done) break;
+
+  const lines = decoder.decode(value).split('\n');
+  for (const line of lines) {
+    if (line.startsWith('data: ')) {
+      const event = JSON.parse(line.slice(6));
+      console.log(event);
+      // { type: 'text-delta', id: '...', delta: 'Hello' }
+    }
+  }
+}
+```
+
+## WebSocket Support
+
+Enable real-time bidirectional communication:
+
+```typescript
+const server = new CogitatorServer({
+  // ...
+  config: { enableWebSocket: true },
+});
+
+// After init, setup WebSocket on HTTP server
+import { setupWebSocket } from '@cogitator-ai/express';
+import { createServer } from 'http';
+
+const httpServer = createServer(app);
+await setupWebSocket(httpServer, routeContext, { path: '/api/ws' });
+httpServer.listen(3000);
+```
+
+Client usage:
+
+```typescript
+const ws = new WebSocket('ws://localhost:3000/api/ws');
+
+ws.onmessage = (event) => {
+  const message = JSON.parse(event.data);
+  console.log(message);
+};
+
+// Run agent
+ws.send(
+  JSON.stringify({
+    type: 'run',
+    id: 'req-1',
+    payload: {
+      type: 'agent',
+      name: 'chat',
+      input: 'Hello!',
+    },
+  })
+);
+```
+
+## Custom Middleware
+
+Use built-in middleware factories or create your own:
+
+```typescript
+import {
+  createAuthMiddleware,
+  createRateLimitMiddleware,
+  createCorsMiddleware,
+  errorHandler,
+} from '@cogitator-ai/express';
+
+// Use individually
+app.use(
+  '/api',
+  createAuthMiddleware(async (req) => {
+    // Custom auth logic
+  })
+);
+
+app.use(
+  '/api',
+  createRateLimitMiddleware({
+    windowMs: 60000,
+    max: 100,
+    keyGenerator: (req) => req.headers['x-api-key'] as string,
+  })
+);
+```
+
+## Custom Routes
+
+Create custom routes with streaming support:
+
+```typescript
+import { Router } from 'express';
+import { ExpressStreamWriter, setupSSEHeaders, generateId } from '@cogitator-ai/express';
+
+const router = Router();
+
+router.post('/custom/stream', async (req, res) => {
+  setupSSEHeaders(res);
+  const writer = new ExpressStreamWriter(res);
+  const messageId = generateId('msg');
+
+  writer.start(messageId);
+  writer.textStart(generateId('txt'));
+
+  // Your streaming logic
+  writer.textDelta('txt-1', 'Hello ');
+  writer.textDelta('txt-1', 'World!');
+
+  writer.textEnd('txt-1');
+  writer.finish(messageId);
+  writer.close();
+});
+```
+
+## API Reference
+
+### CogitatorServer
+
+```typescript
+class CogitatorServer {
+  constructor(options: CogitatorServerConfig);
+  init(): Promise<void>;
+  readonly isInitialized: boolean;
+}
+```
+
+### CogitatorServerConfig
+
+```typescript
+interface CogitatorServerConfig {
+  app: Router;
+  cogitator: Cogitator;
+  agents?: Record<string, Agent>;
+  workflows?: Record<string, Workflow>;
+  swarms?: Record<string, SwarmConfig>;
+  config?: {
+    basePath?: string; // Default: '/cogitator'
+    enableWebSocket?: boolean; // Default: false
+    enableSwagger?: boolean; // Default: true
+    auth?: AuthFunction;
+    rateLimit?: RateLimitConfig;
+    cors?: CorsConfig;
+    swagger?: SwaggerConfig;
+    websocket?: WebSocketConfig;
+    requestTimeout?: number; // Default: 30000
+  };
+}
+```
+
+### ExpressStreamWriter
+
+```typescript
+class ExpressStreamWriter {
+  constructor(res: Response);
+  start(messageId: string): void;
+  textStart(id: string): void;
+  textDelta(id: string, delta: string): void;
+  textEnd(id: string): void;
+  toolCallStart(id: string, toolName: string): void;
+  toolCallDelta(id: string, argsTextDelta: string): void;
+  toolCallEnd(id: string): void;
+  toolResult(id: string, toolCallId: string, result: unknown): void;
+  workflowEvent(event: string, data: unknown): void;
+  swarmEvent(event: string, data: unknown): void;
+  error(message: string, code?: string): void;
+  finish(messageId: string, usage?: Usage): void;
+  close(): void;
+}
+```
+
+## Error Handling
+
+All endpoints return consistent error responses:
+
+```json
+{
+  "error": {
+    "message": "Agent 'unknown' not found",
+    "code": "NOT_FOUND"
+  }
+}
+```
+
+Error codes map to HTTP status codes:
+
+- `INVALID_INPUT` → 400
+- `UNAUTHORIZED` → 401
+- `PERMISSION_DENIED` → 403
+- `NOT_FOUND` → 404
+- `RATE_LIMIT_EXCEEDED` → 429
+- `INTERNAL` → 500
+- `UNAVAILABLE` → 503
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { CogitatorServer } from './server.js';
+export type { AuthContext, AuthFunction, CogitatorRequest, CogitatorServerConfig, RateLimitConfig, CorsConfig, SwaggerConfig, WebSocketConfig, RouteContext, AgentListResponse, AgentRunRequest, AgentRunResponse, ThreadResponse, AddMessageRequest, ToolListResponse, WorkflowListResponse, WorkflowRunRequest, WorkflowRunResponse, WorkflowStatusResponse, SwarmListResponse, SwarmRunRequest, SwarmRunResponse, BlackboardResponse, HealthResponse, ErrorResponse, WebSocketMessage, WebSocketResponse, OpenAPISpec, } from './types.js';
+export { createAuthMiddleware, createRateLimitMiddleware, createCorsMiddleware, errorHandler, notFoundHandler, } from './middleware/index.js';
+export { createHealthRoutes, createAgentRoutes, createThreadRoutes, createToolRoutes, createWorkflowRoutes, createSwarmRoutes, } from './routes/index.js';
+export { ExpressStreamWriter, setupSSEHeaders, generateId, encodeSSE, encodeDone, } from './streaming/index.js';
+export type { StreamEvent, StartEvent, TextStartEvent, TextDeltaEvent, TextEndEvent, ToolCallStartEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolResultEvent, ErrorEvent, FinishEvent, Usage, } from './streaming/protocol.js';
+export { generateOpenAPISpec, serveSwaggerUI } from './swagger/index.js';
+export { setupWebSocket } from './websocket/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,YAAY,EACV,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,UAAU,EACV,aAAa,EACb,eAAe,EACf,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,sBAAsB,CAAC;AAE9B,YAAY,EACV,WAAW,EACX,UAAU,EACV,cAAc,EACd,cAAc,EACd,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,UAAU,EACV,WAAW,EACX,KAAK,GACN,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { CogitatorServer } from './server.js';
+export { createAuthMiddleware, createRateLimitMiddleware, createCorsMiddleware, errorHandler, notFoundHandler, } from './middleware/index.js';
+export { createHealthRoutes, createAgentRoutes, createThreadRoutes, createToolRoutes, createWorkflowRoutes, createSwarmRoutes, } from './routes/index.js';
+export { ExpressStreamWriter, setupSSEHeaders, generateId, encodeSSE, encodeDone, } from './streaming/index.js';
+export { generateOpenAPISpec, serveSwaggerUI } from './swagger/index.js';
+export { setupWebSocket } from './websocket/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAiC9C,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,UAAU,EACV,SAAS,EACT,UAAU,GACX,MAAM,sBAAsB,CAAC;AAiB9B,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,4 @@
+import type { Response, NextFunction } from 'express';
+import type { CogitatorRequest, AuthFunction } from '../types.js';
+export declare function createAuthMiddleware(authFn?: AuthFunction): (req: CogitatorRequest, res: Response, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGlE,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,YAAY,IAC1C,KAAK,gBAAgB,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAuBvE"}

package/dist/middleware/auth.js

@@ -0,0 +1,26 @@
+import { generateId } from '../streaming/helpers.js';
+export function createAuthMiddleware(authFn) {
+    return async (req, res, next) => {
+        req.cogitator = {
+            requestId: generateId('req'),
+            startTime: Date.now(),
+        };
+        if (!authFn) {
+            return next();
+        }
+        try {
+            const auth = await authFn(req);
+            req.cogitator.auth = auth;
+            next();
+        }
+        catch (error) {
+            res.status(401).json({
+                error: {
+                    message: 'Unauthorized',
+                    code: 'UNAUTHORIZED',
+                },
+            });
+        }
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,UAAU,oBAAoB,CAAC,MAAqB;IACxD,OAAO,KAAK,EAAE,GAAqB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACxE,GAAG,CAAC,SAAS,GAAG;YACd,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;YAC1B,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,OAAO,EAAE,cAAc;oBACvB,IAAI,EAAE,cAAc;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/cors.d.ts

@@ -0,0 +1,4 @@
+import type { Response, NextFunction, Request } from 'express';
+import type { CorsConfig } from '../types.js';
+export declare function createCorsMiddleware(config: CorsConfig): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=cors.d.ts.map

package/dist/middleware/cors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.d.ts","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAuB9C,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU,IAU7C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UA4BxD"}

package/dist/middleware/cors.js

@@ -0,0 +1,42 @@
+function isOriginAllowed(origin, allowed) {
+    if (!origin)
+        return false;
+    if (typeof allowed === 'string') {
+        return allowed === '*' || allowed === origin;
+    }
+    if (Array.isArray(allowed)) {
+        return allowed.includes(origin);
+    }
+    if (typeof allowed === 'function') {
+        return allowed(origin);
+    }
+    return false;
+}
+export function createCorsMiddleware(config) {
+    const { origin, credentials = true, methods = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'], allowedHeaders = ['Content-Type', 'Authorization', 'X-Request-ID'], exposedHeaders = ['X-RateLimit-Limit', 'X-RateLimit-Remaining', 'X-RateLimit-Reset'], maxAge = 86400, } = config;
+    return (req, res, next) => {
+        const requestOrigin = req.headers.origin;
+        if (origin === '*' || (typeof origin === 'string' && origin === '*')) {
+            res.setHeader('Access-Control-Allow-Origin', '*');
+        }
+        else if (isOriginAllowed(requestOrigin, origin)) {
+            res.setHeader('Access-Control-Allow-Origin', requestOrigin);
+            res.setHeader('Vary', 'Origin');
+        }
+        if (credentials) {
+            res.setHeader('Access-Control-Allow-Credentials', 'true');
+        }
+        if (exposedHeaders.length > 0) {
+            res.setHeader('Access-Control-Expose-Headers', exposedHeaders.join(', '));
+        }
+        if (req.method === 'OPTIONS') {
+            res.setHeader('Access-Control-Allow-Methods', methods.join(', '));
+            res.setHeader('Access-Control-Allow-Headers', allowedHeaders.join(', '));
+            res.setHeader('Access-Control-Max-Age', maxAge.toString());
+            res.status(204).end();
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=cors.js.map

package/dist/middleware/cors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cors.js","sourceRoot":"","sources":["../../src/middleware/cors.ts"],"names":[],"mappings":"AAGA,SAAS,eAAe,CACtB,MAA0B,EAC1B,OAA6B;IAE7B,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,MAAM,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,MAAM,EACJ,MAAM,EACN,WAAW,GAAG,IAAI,EAClB,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,EAC9D,cAAc,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,CAAC,EAClE,cAAc,GAAG,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,mBAAmB,CAAC,EACpF,MAAM,GAAG,KAAK,GACf,GAAG,MAAM,CAAC;IAEX,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAEzC,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,eAAe,CAAC,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,aAAc,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,SAAS,CAAC,+BAA+B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACzE,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/middleware/error-handler.d.ts

@@ -0,0 +1,4 @@
+import type { Request, Response, NextFunction } from 'express';
+export declare function errorHandler(err: Error, _req: Request, res: Response, _next: NextFunction): void;
+export declare function notFoundHandler(_req: Request, res: Response): void;
+//# sourceMappingURL=error-handler.d.ts.map

package/dist/middleware/error-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../src/middleware/error-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG/D,wBAAgB,YAAY,CAC1B,GAAG,EAAE,KAAK,EACV,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,YAAY,GAClB,IAAI,CAwBN;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,GAAG,IAAI,CAOlE"}

package/dist/middleware/error-handler.js

@@ -0,0 +1,32 @@
+import { CogitatorError, ERROR_STATUS_CODES, ErrorCode } from '@cogitator-ai/types';
+export function errorHandler(err, _req, res, _next) {
+    if (res.headersSent) {
+        return;
+    }
+    if (CogitatorError.isCogitatorError(err)) {
+        const statusCode = ERROR_STATUS_CODES[err.code] || 500;
+        res.status(statusCode).json({
+            error: {
+                message: err.message,
+                code: err.code,
+            },
+        });
+        return;
+    }
+    console.error('[CogitatorServer] Unhandled error:', err);
+    res.status(500).json({
+        error: {
+            message: 'Internal server error',
+            code: ErrorCode.INTERNAL_ERROR,
+        },
+    });
+}
+export function notFoundHandler(_req, res) {
+    res.status(404).json({
+        error: {
+            message: 'Not found',
+            code: ErrorCode.AGENT_NOT_FOUND,
+        },
+    });
+}
+//# sourceMappingURL=error-handler.js.map

package/dist/middleware/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../src/middleware/error-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,UAAU,YAAY,CAC1B,GAAU,EACV,IAAa,EACb,GAAa,EACb,KAAmB;IAEnB,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IAED,IAAI,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YAC1B,KAAK,EAAE;gBACL,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;aACf;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IAEzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE;YACL,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,SAAS,CAAC,cAAc;SAC/B;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,GAAa;IAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACnB,KAAK,EAAE;YACL,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,SAAS,CAAC,eAAe;SAChC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/index.d.ts

@@ -0,0 +1,5 @@
+export { createAuthMiddleware } from './auth.js';
+export { createRateLimitMiddleware } from './rate-limit.js';
+export { createCorsMiddleware } from './cors.js';
+export { errorHandler, notFoundHandler } from './error-handler.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/middleware/index.js

@@ -0,0 +1,5 @@
+export { createAuthMiddleware } from './auth.js';
+export { createRateLimitMiddleware } from './rate-limit.js';
+export { createCorsMiddleware } from './cors.js';
+export { errorHandler, notFoundHandler } from './error-handler.js';
+//# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/middleware/rate-limit.d.ts

@@ -0,0 +1,4 @@
+import type { Response, NextFunction } from 'express';
+import type { RateLimitConfig, CogitatorRequest } from '../types.js';
+export declare function createRateLimitMiddleware(config: RateLimitConfig): (req: CogitatorRequest, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAW,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA4BrE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,eAAe,IASvD,KAAK,gBAAgB,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UAoCjE"}

package/dist/middleware/rate-limit.js

@@ -0,0 +1,50 @@
+const store = new Map();
+function cleanupExpired() {
+    const now = Date.now();
+    for (const [key, entry] of store.entries()) {
+        if (entry.resetTime <= now) {
+            store.delete(key);
+        }
+    }
+}
+setInterval(cleanupExpired, 60000);
+function defaultKeyGenerator(req) {
+    const forwarded = req.headers['x-forwarded-for'];
+    if (typeof forwarded === 'string') {
+        return forwarded.split(',')[0].trim();
+    }
+    return req.ip || req.socket.remoteAddress || 'unknown';
+}
+export function createRateLimitMiddleware(config) {
+    const { windowMs, max, message = 'Too many requests, please try again later', keyGenerator = defaultKeyGenerator, skip, } = config;
+    return (req, res, next) => {
+        if (skip?.(req)) {
+            return next();
+        }
+        const key = keyGenerator(req);
+        const now = Date.now();
+        let entry = store.get(key);
+        if (!entry || entry.resetTime <= now) {
+            entry = { count: 0, resetTime: now + windowMs };
+            store.set(key, entry);
+        }
+        entry.count++;
+        const remaining = Math.max(0, max - entry.count);
+        const resetSeconds = Math.ceil((entry.resetTime - now) / 1000);
+        res.setHeader('X-RateLimit-Limit', max.toString());
+        res.setHeader('X-RateLimit-Remaining', remaining.toString());
+        res.setHeader('X-RateLimit-Reset', resetSeconds.toString());
+        if (entry.count > max) {
+            res.setHeader('Retry-After', resetSeconds.toString());
+            res.status(429).json({
+                error: {
+                    message,
+                    code: 'RATE_LIMIT_EXCEEDED',
+                },
+            });
+            return;
+        }
+        next();
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAQA,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEhD,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,WAAW,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAEnC,SAAS,mBAAmB,CAAC,GAAY;IACvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAuB;IAC/D,MAAM,EACJ,QAAQ,EACR,GAAG,EACH,OAAO,GAAG,2CAA2C,EACrD,YAAY,GAAG,mBAAmB,EAClC,IAAI,GACL,GAAG,MAAM,CAAC;IAEX,OAAO,CAAC,GAAqB,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAClE,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,EAAE,CAAC;YACrC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;YAChD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;QAED,KAAK,CAAC,KAAK,EAAE,CAAC;QAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAE/D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE5D,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE;oBACL,OAAO;oBACP,IAAI,EAAE,qBAAqB;iBAC5B;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/agents.d.ts

@@ -0,0 +1,4 @@
+import { Router } from 'express';
+import type { RouteContext } from '../types.js';
+export declare function createAgentRoutes(ctx: RouteContext): Router;
+//# sourceMappingURL=agents.d.ts.map

package/dist/routes/agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EACV,YAAY,EAKb,MAAM,aAAa,CAAC;AAIrB,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CA8H3D"}