@cogitator-ai/fastify 0.8.6 → 0.10.0

package/README.md

@@ -49,10 +49,11 @@ console.log('Server running on http://localhost:3000');
 ### Agents
 
 ```
-GET    /api/agents                    - List all agents
-POST   /api/agents/:name/run          - Run agent (JSON response)
-POST   /api/agents/:name/stream       - Run agent (SSE stream)
-POST   /api/agents/:name/resume       - Resume a run paused for tool approvals
+GET    /api/agents                         - List all agents
+POST   /api/agents/:name/run               - Run agent (JSON response)
+POST   /api/agents/:name/stream            - Run agent (SSE stream)
+POST   /api/agents/:name/resume            - Resume a run paused for tool approvals
+POST   /api/agents/:name/resume/stream     - Resume a paused run (SSE stream)
 ```
 
 Bodies are validated with JSON Schema (`input` must contain more than whitespace, the same rule the other adapters share from `@cogitator-ai/server-shared`); validation failures return `400 INVALID_INPUT` before the model is called. The `usage` of a run answer carries `inputTokens`, `outputTokens` and `totalTokens`, plus `reasoningTokens`, `cachedInputTokens` and `cacheWriteTokens` when the model reported them, the same shape as every other adapter. The `finish` event of an agent stream carries the same `usage` (never the run's cost or duration). The agent list exposes `config.description`, never the instructions. The authenticated `userId` is passed to the run, and runs are aborted when the client disconnects.
@@ -60,13 +61,25 @@ Bodies are validated with JSON Schema (`input` must contain more than whitespace
 ### Threads (Memory)
 
 ```
-GET    /api/threads/:id               - Get thread messages
+GET    /api/threads/:id               - Get thread messages, a page at a time with ?limit&cursor
 POST   /api/threads/:id/messages      - Add message to thread
 DELETE /api/threads/:id               - Delete thread
 ```
 
 The routes use `cogitator.getMemory()`, which connects the configured memory adapter on first use, so threads can be read on a fresh server before any agent has run. Only a `Cogitator` without `memory` configured answers `503 UNAVAILABLE`. Messages take `role` `user` or `assistant` (more with `threadMessageRoles`), and `metadata` is stored on the memory entry.
 
+`GET /threads/:id` answers the whole thread by default. With `?limit=50` it answers the newest 50 messages (oldest first within the page) and a `nextCursor`, and `?limit=50&cursor=<nextCursor>` the 50 before them, until an answer has no `nextCursor`. Messages written in the same millisecond are never skipped or repeated across pages. A `limit` outside 1 to 1000 or a cursor the server never gave is refused with `400 INVALID_INPUT`, with the message every adapter gives.
+
+```typescript
+let cursor: string | undefined;
+do {
+  const query = new URLSearchParams({ limit: '50', ...(cursor && { cursor }) });
+  const page = await (await fetch(`/api/threads/${threadId}?${query}`)).json();
+  render(page.messages);
+  cursor = page.nextCursor;
+} while (cursor);
+```
+
 Request bodies go through the validators of `@cogitator-ai/server-shared` in a `preValidation` hook, before the JSON schema could coerce `input: 42` into `"42"`, so Fastify refuses exactly what the other adapters refuse, and the schemas document the bodies.
 
 - A run sends `context` to the model as data the application supplied, and the model reads a `system` thread message as operator instructions, so clients may set neither unless the server allows it: `acceptContext` lists the `context` keys clients may send (`true` accepts any key, for clients trusted like your own code), and `threadMessageRoles` the roles of `POST /threads/:id/messages` (`user` and `assistant` by default). Anything else is refused with `400 INVALID_INPUT`, over HTTP and WebSocket alike.
@@ -83,7 +96,7 @@ POST   /api/workflows/:name/run       - Run workflow
 POST   /api/workflows/:name/stream    - Stream workflow events
 ```
 
-Options are limited to `maxConcurrency`/`maxIterations` (positive integers), and `checkpoint: true` is refused, since the server keeps no checkpoint store to resume from. A failed workflow returns `500 WORKFLOW_FAILED` (the stream ends with an `error` event instead of `workflow_completed`). Disconnecting aborts the workflow. Stream events are `{ type: 'workflow', event, data }` with `event` one of `node_started`, `node_completed`, `node_error`, `node_progress`, `workflow_completed`.
+Options are limited to `maxConcurrency`/`maxIterations` (positive integers, held to `limits.workflowMaxConcurrency` and `limits.workflowMaxIterations` when set, which a request that asks for nothing gets), and `checkpoint: true` is refused, since the server keeps no checkpoint store to resume from. A failed workflow answers the error it failed with, mapped like any other run error (a node that hit `LLM_RATE_LIMITED` answers `429` with `Retry-After`, an internal error `500 INTERNAL_ERROR`), and its stream ends with an `error` event carrying that code instead of `workflow_completed`. Disconnecting aborts the workflow. Stream events are `{ type: 'workflow', event, data }` with `event` one of `node_started`, `node_completed`, `node_error`, `node_progress`, `workflow_completed`.
 
 ### Swarms
 
@@ -94,7 +107,7 @@ POST   /api/swarms/:name/stream       - Stream swarm events
 GET    /api/swarms/:name/blackboard   - Get configured blackboard sections
 ```
 
-`timeout` must be positive. Disconnecting aborts the swarm. Stream events are `{ type: 'swarm', event, data }`: `agent_start`, `agent_complete`, `agent_error`, `message`, the swarm's own events, and finally `swarm_completed` with the output and usage. Each run creates a fresh swarm, so the blackboard endpoint returns the configured initial sections.
+`timeout` must be positive. With `limits.swarmTimeout` set, a longer timeout is held to it and a run without one gets it, and a swarm that runs out of time answers `504 RUN_TIMEOUT`. Disconnecting aborts the swarm. Stream events are `{ type: 'swarm', event, data }`: `agent_start`, `agent_complete`, `agent_error`, `message`, the swarm's own events, and finally `swarm_completed` with the output and usage. Each run creates a fresh swarm, so the blackboard endpoint returns the configured initial sections.
 
 ### Tools & Docs
 
@@ -106,7 +119,7 @@ GET    /api/docs                      - Swagger UI (enableSwagger)
 GET    /api/docs/json                 - OpenAPI spec (enableSwagger)
 ```
 
-The OpenAPI document is generated by `@fastify/swagger` from the route schemas.
+The OpenAPI document is generated by `@fastify/swagger` from the route schemas, which show the operator's `limits` as the defaults of the capped fields.
 
 ## Configuration
 
@@ -146,6 +159,21 @@ await fastify.register(cogitatorPlugin, {
   websocket: {
     path: '/ws',
   },
+
+  // Caps on what a request may ask a run for. A larger value is held to the cap,
+  // a request without one gets the cap. Checked when the plugin is registered.
+  limits: { swarmTimeout: 120_000, workflowMaxIterations: 50, workflowMaxConcurrency: 4 },
+
+  // 'deny' answers 401 to callers without a userId. Health, ready and the docs stay open.
+  anonymous: 'deny',
+
+  // Called with the auth context and the thread of every request that names one.
+  // false answers 403 THREAD_FORBIDDEN and no run starts.
+  authorizeThread: (auth, threadId) => threadId.startsWith(`${auth?.userId}:`),
+
+  // Dependencies for the tools of agent runs, streams and resumes (context.deps).
+  // Built from the request on the server, never read from the body.
+  deps: async (request) => ({ db: await tenantDb(request.headers['x-tenant']) }),
 });
 ```
 
@@ -157,6 +185,14 @@ When `auth` returns a `userId`, everything a caller does with threads is scoped
 - `GET /threads/:id`, `POST /threads/:id/messages` and `DELETE /threads/:id` check the thread's owner first; `POST` to an unknown id creates the thread owned by the caller.
 - Another user's thread answers `403` with code `THREAD_ACCESS_DENIED`, and its messages are neither returned nor changed.
 - Threads created earlier without an owner (no `userId`) stay open only to callers without a `userId`, such as servers with no `auth` configured.
+- `authorizeThread(auth, threadId)` adds your own rule on top of ownership, for shared or team threads. It runs on every route that names a thread (agent run, stream and resume, swarm run and stream, `GET`, `DELETE` and `POST /threads/:id/messages`) and on WebSocket runs with a `threadId`, after the body is validated and before core checks the owner. Answering `false` refuses with `403 THREAD_FORBIDDEN`, and no run starts.
+- `anonymous: 'deny'` refuses every caller whose `auth` gave no `userId` with `401 UNAUTHORIZED`, WebSocket upgrades included. `/health`, `/ready` and `/docs` stay open. An unknown path under the prefix answers `401` too, so an anonymous caller cannot probe which routes exist, and `404 NOT_FOUND` once the caller has a `userId`. The default, `'allow'`, lets anonymous callers in as before, and an unknown path answers `404 NOT_FOUND` in the error envelope.
+
+### Limits and deps
+
+`limits` caps what a client may ask a run for: `swarmTimeout` (ms), `workflowMaxIterations` and `workflowMaxConcurrency`. A request is never refused over a limit: it gets the smaller of what it asked for and the limit, or the limit when it asked for nothing, over HTTP and SSE alike. The route schemas give each limit as the default of its field, without a `maximum`, so Fastify does not refuse a larger value. Each limit must be a positive integer, or registering the plugin fails.
+
+`deps: (request) => deps` builds the dependencies agent tools read as `context.deps` (a database handle, a tenant, a client), and the run, stream or resume gets them as `deps`. They are built on the server for each request and never come from the body. Over WebSocket the hook gets the upgrade's `FastifyRequest`, which went through your hooks like any request, and is called for each run. An error the hook throws is answered like a run error, before a stream starts, and over WebSocket (like an error `authorizeThread` throws) with `{ type: 'error', id, error }`, starting no run.
 
 ### Approvals
 
@@ -180,6 +216,8 @@ await fetch('/api/agents/support/resume', {
 
 The body is `{ threadId, decisions?, defaultDecision? }`, where a decision is `{ approved: boolean, reason?: string }`; malformed bodies get `400 INVALID_INPUT`. The response has the same shape as `/run` and may pause again for calls left without a decision. The run resumes as the authenticated `userId`: a thread with no paused run answers `409 RUN_NOT_PAUSED`, and another user's paused run `403 THREAD_ACCESS_DENIED`. Over WebSocket, send `{ type: 'resume', id, payload: { name, threadId, decisions?, defaultDecision? } }`; a paused run's `complete` event carries `status` and `pendingApprovals`.
 
+`POST /agents/:name/resume/stream` takes the same body and streams the rest of the run like `/stream`. `start` and `finish` name the resumed thread, and a body, agent or thread refused before the stream opens is answered as JSON, just like `/resume`. A thread with no paused run ends the open stream with an `error` event, `code: 'RUN_NOT_PAUSED'`, and disconnecting aborts the resume.
+
 ## SSE Streaming
 
 The `/agents/:name/stream` endpoint returns Server-Sent Events:
@@ -236,7 +274,7 @@ Text is emitted in `text-start`/`text-delta`/`text-end` blocks that are closed a
 
 ## WebSocket Support
 
-Enable real-time bidirectional communication (requires `@fastify/websocket`; without it the plugin logs a warning and skips the endpoint). The endpoint is `<prefix>/ws` unless `websocket.path` says otherwise, and the `auth` hook runs on the upgrade request.
+Enable real-time bidirectional communication (requires `@fastify/websocket`, without it the plugin logs a warning and skips the endpoint). The endpoint is `<prefix>/ws` unless `websocket.path` says otherwise, and the `auth` hook runs on the upgrade request, which `anonymous: 'deny'` refuses with 401 when it gives no `userId`. A `run` or `resume` on a thread `authorizeThread` refuses answers `{ type: 'error', id, error }` without starting, and `deps` is called with the upgrade request.
 
 ```typescript
 await fastify.register(cogitatorPlugin, {
@@ -280,21 +318,23 @@ ws.send(JSON.stringify({ type: 'ping' }));
 
 ### WebSocket Message Types
 
-| Type           | Direction     | Description                                                                                                     |
-| -------------- | ------------- | --------------------------------------------------------------------------------------------------------------- |
-| `ping`         | Client→Server | Heartbeat                                                                                                       |
-| `pong`         | Server→Client | Heartbeat response                                                                                              |
-| `subscribe`    | Client→Server | Subscribe to `agent:<name>`: receive events of the same user's runs on other connections                        |
-| `subscribed`   | Server→Client | Subscription confirmed                                                                                          |
-| `unsubscribe`  | Client→Server | Unsubscribe from channel                                                                                        |
-| `unsubscribed` | Server→Client | Unsubscription confirmed                                                                                        |
-| `run`          | Client→Server | Run an agent (`payload: { type: 'agent', name, input, context?, threadId? }`); one run per connection at a time |
-| `resume`       | Client→Server | Resume a run paused for tool approvals (`payload: { name, threadId, decisions?, defaultDecision? }`)            |
-| `stop`         | Client→Server | Abort the running agent                                                                                         |
-| `event`        | Server→Client | Run event: `token`, `reasoning`, `tool-call`, `tool-result`, `complete`, `cancelled`                            |
-| `error`        | Server→Client | `{ type: 'error', id?, error }`: invalid message, unknown agent, run already in progress, or a failed run       |
-
-Only agent runs are supported over WebSocket; use the HTTP endpoints for workflows and swarms. A second `run` while one is active is refused with `A run is already in progress`; send `stop` first. A connection may subscribe to at most 64 channels. A failed run reports a `CogitatorError`'s message; any other error is logged and sent as `Internal server error`.
+| Type           | Direction     | Description                                                                                                                   |
+| -------------- | ------------- | ----------------------------------------------------------------------------------------------------------------------------- |
+| `ping`         | Client→Server | Heartbeat                                                                                                                     |
+| `pong`         | Server→Client | Heartbeat response                                                                                                            |
+| `subscribe`    | Client→Server | Subscribe to `agent:<name>`: receive events of the same user's runs on other connections, on threads `authorizeThread` allows |
+| `subscribed`   | Server→Client | Subscription confirmed                                                                                                        |
+| `unsubscribe`  | Client→Server | Unsubscribe from channel                                                                                                      |
+| `unsubscribed` | Server→Client | Unsubscription confirmed                                                                                                      |
+| `run`          | Client→Server | Run an agent (`payload: { type: 'agent', name, input, context?, threadId? }`), one run per connection at a time               |
+| `resume`       | Client→Server | Resume a run paused for tool approvals (`payload: { name, threadId, decisions?, defaultDecision? }`)                          |
+| `stop`         | Client→Server | Abort the running agent                                                                                                       |
+| `event`        | Server→Client | Run event: `token`, `reasoning`, `tool-call`, `tool-result`, `complete`, `cancelled`                                          |
+| `error`        | Server→Client | `{ type: 'error', id?, error }`: invalid message, unknown agent, run already in progress, or a failed run                     |
+
+Only agent runs are supported over WebSocket, use the HTTP endpoints for workflows and swarms. A second `run` while one is active is refused with `A run is already in progress`, send `stop` first. A connection may subscribe to at most 64 channels. A failed run reports a `CogitatorError`'s message, any other error is logged and sent as `Internal server error`.
+
+A subscriber gets the events of a run only when it has the `userId` of the caller who started it and, with `authorizeThread` set, when `authorizeThread(subscriberAuth, threadId)` allows it on the run's thread (the `threadId` of the run, or the one core created for it). The answer is asked once per subscriber and run, and a subscriber it refuses, or throws for, gets none of the run's events. Without `authorizeThread`, callers without a `userId` share the events of each other's runs, so set `authorizeThread` or `anonymous: 'deny'` when anonymous callers must not see each other.
 
 ## Custom Streaming
 
@@ -372,6 +412,10 @@ interface CogitatorPluginOptions {
   sseHeartbeatMs?: number; // Default: 5000, 0 turns SSE heartbeats off
   acceptContext?: boolean | string[]; // context keys clients may send: none by default, a list, or true for any
   threadMessageRoles?: ('user' | 'assistant' | 'system')[]; // roles of POST /threads/:id/messages, default user and assistant
+  limits?: RunLimits; // { swarmTimeout?, workflowMaxIterations?, workflowMaxConcurrency? }
+  anonymous?: 'allow' | 'deny'; // Default: 'allow'
+  authorizeThread?: (auth: AuthContext | undefined, threadId: string) => boolean | Promise<boolean>;
+  deps?: (request: FastifyRequest) => unknown | Promise<unknown>;
 }
 ```
 
@@ -411,6 +455,7 @@ fastify.cogitator.runtime; // Cogitator instance
 fastify.cogitator.agents; // Registered agents
 fastify.cogitator.workflows; // Registered workflows
 fastify.cogitator.swarms; // Registered swarms
+fastify.cogitator.limits; // The checked run limits
 
 // Request decorators (in handlers)
 request.cogitatorAuth; // Auth context from auth hook
@@ -436,16 +481,17 @@ Error codes map to HTTP status codes:
 - `INVALID_INPUT` → 400 (schema validation and malformed JSON; `details` carries the validation errors)
 - `UNAUTHORIZED` → 401
 - `THREAD_ACCESS_DENIED` → 403 (another user's thread)
+- `THREAD_FORBIDDEN` → 403 (`authorizeThread` refused the thread)
 - `NOT_FOUND` → 404
 - `RUN_NOT_PAUSED` → 409 (resume of a thread without a paused run)
 - `PAYLOAD_TOO_LARGE` → 413
 - `RATE_LIMIT_EXCEEDED` → 429
-- `WORKFLOW_FAILED` → 500
 - `INTERNAL_ERROR` → 500
 - `UNIMPLEMENTED` → 501 (optional workflows/swarms package missing)
 - `UNAVAILABLE` → 503 (no memory configured)
+- `RUN_TIMEOUT` → 504 (a swarm ran out of time)
 
-A `CogitatorError` keeps its message and code and uses the code's mapped status (for example `LLM_RATE_LIMITED` → 429). Any other error is logged through the Fastify logger and answered as `500 Internal server error`, so internals never reach the client. The same masking applies to SSE `error` events, the `node_error`/`agent_error` stream events, `Workflow failed: …` messages and WebSocket run errors.
+A `CogitatorError` keeps its message and code and answers with its own `statusCode`, which is the code's mapped status unless the error was given another (for example `LLM_RATE_LIMITED` → 429). When it says when to retry (`retryAfter`, as provider rate limits do), the answer carries `Retry-After` in whole seconds. The mapping is `describeHttpError` of `@cogitator-ai/server-shared`, so Express, Fastify, Hono, Koa and Next answer the same error the same way. Any other error is logged through the Fastify logger and answered as `500 Internal server error`, so internals never reach the client. The same mapping applies to a failed workflow, and the same masking to SSE `error` events, the `node_error`/`agent_error` stream events and WebSocket run errors.
 
 ## JSON Schema Validation
 
@@ -459,10 +505,14 @@ import {
   AddMessageRequestSchema,
   WorkflowRunRequestSchema,
   SwarmRunRequestSchema,
+  ThreadPageQuerySchema,
+  ThreadResponseSchema,
+  workflowRunRequestSchema,
+  swarmRunRequestSchema,
 } from '@cogitator-ai/fastify';
 ```
 
-`AgentResumeRequestSchema` requires a non-blank `threadId` and validates each decision as `{ approved: boolean, reason?: string }`. `AgentRunRequestSchema` and `SwarmRunRequestSchema` require a non-blank `input` (the swarm `timeout` must be greater than 0), `AddMessageRequestSchema` requires a non-blank `content` and a `user`/`assistant`/`system` role (the routes accept `system` only with `threadMessageRoles`), and `WorkflowRunRequestSchema.options` only allows `maxConcurrency`/`maxIterations` (integers ≥ 1) and `checkpoint: false` (`additionalProperties: false`). The routes validate bodies with the shared validators first, so the schemas describe what they accept.
+`AgentResumeRequestSchema` requires a non-blank `threadId` and validates each decision as `{ approved: boolean, reason?: string }`. `AgentRunRequestSchema` and `SwarmRunRequestSchema` require a non-blank `input` (the swarm `timeout` must be greater than 0), `AddMessageRequestSchema` requires a non-blank `content` and a `user`/`assistant`/`system` role (the routes accept `system` only with `threadMessageRoles`), and `WorkflowRunRequestSchema.options` only allows `maxConcurrency`/`maxIterations` (integers ≥ 1) and `checkpoint: false` (`additionalProperties: false`). The routes validate bodies with the shared validators first, so the schemas describe what they accept. `workflowRunRequestSchema(limits)` and `swarmRunRequestSchema(limits)` build the same schemas with the operator's limits as defaults, as the routes use them. `ThreadPageQuerySchema` and `ThreadResponseSchema` describe `GET /threads/:id`.
 
 ## Documentation
 

package/dist/hooks/auth.d.ts

@@ -1,4 +1,10 @@
 import type { onRequestHookHandler } from 'fastify';
+import { type AnonymousPolicy } from '@cogitator-ai/server-shared';
 import type { AuthFunction } from '../types.js';
 export declare function createAuthHook(authFn?: AuthFunction): onRequestHookHandler;
+/**
+ * Answers `401 UNAUTHORIZED` to a caller without a user id when `anonymous` is `'deny'`.
+ * Added to the API routes only, so health, ready and the docs stay open.
+ */
+export declare function createAnonymousHook(anonymous: AnonymousPolicy | undefined): onRequestHookHandler;
 //# sourceMappingURL=auth.d.ts.map

package/dist/hooks/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/hooks/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgC,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,oBAAoB,CAuB1E"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/hooks/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgC,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIhD,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,oBAAoB,CAkB1E;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,eAAe,GAAG,SAAS,GAAG,oBAAoB,CAKhG"}

package/dist/hooks/auth.js

@@ -1,4 +1,6 @@
+import { admitCaller } from '@cogitator-ai/server-shared';
 import { generateId } from '../streaming/helpers.js';
+import { sendError, sendFailure } from '../routes/utils.js';
 export function createAuthHook(authFn) {
     return async (request, reply) => {
         request.cogitatorRequestId = generateId('req');
@@ -14,13 +16,19 @@ export function createAuthHook(authFn) {
             request.log.warn({ err }, 'auth rejected request');
             if (reply.sent)
                 return;
-            return reply.status(401).send({
-                error: {
-                    message: 'Unauthorized',
-                    code: 'UNAUTHORIZED',
-                },
-            });
+            return sendError(reply, 401, 'Unauthorized', 'UNAUTHORIZED');
         }
     };
 }
+/**
+ * Answers `401 UNAUTHORIZED` to a caller without a user id when `anonymous` is `'deny'`.
+ * Added to the API routes only, so health, ready and the docs stay open.
+ */
+export function createAnonymousHook(anonymous) {
+    return async (request, reply) => {
+        const refusal = admitCaller(request.cogitatorAuth?.userId, anonymous);
+        if (refusal && !reply.sent)
+            return sendFailure(reply, refusal);
+    };
+}
 //# sourceMappingURL=auth.js.map

package/dist/hooks/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/hooks/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,OAAO,CAAC,kBAAkB,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO;YACvB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE;oBACL,OAAO,EAAE,cAAc;oBACvB,IAAI,EAAE,cAAc;iBACrB;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/hooks/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAwB,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,OAAO,CAAC,kBAAkB,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACnD,IAAI,KAAK,CAAC,IAAI;gBAAE,OAAO;YACvB,OAAO,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAsC;IACxE,OAAO,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACtE,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC;AACJ,CAAC"}

package/dist/hooks/error-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../src/hooks/error-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAa1E,wBAAgB,YAAY,CAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,GAClB,IAAI,CA8CN"}
+{"version":3,"file":"error-handler.d.ts","sourceRoot":"","sources":["../../src/hooks/error-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAc1E,wBAAgB,YAAY,CAC1B,KAAK,EAAE,YAAY,EACnB,OAAO,EAAE,cAAc,EACvB,KAAK,EAAE,YAAY,GAClB,IAAI,CA+BN"}

package/dist/hooks/error-handler.js

@@ -1,4 +1,5 @@
-import { CogitatorError, ERROR_STATUS_CODES, ErrorCode } from '@cogitator-ai/types';
+import { INTERNAL_ERROR, describeHttpError, errorEnvelope } from '@cogitator-ai/server-shared';
+import { sendFailure } from '../routes/utils.js';
 const CLIENT_ERROR_CODES = {
     400: 'INVALID_INPUT',
     401: 'UNAUTHORIZED',
@@ -12,42 +13,28 @@ export function errorHandler(error, request, reply) {
     if (reply.sent) {
         return;
     }
-    if (CogitatorError.isCogitatorError(error)) {
-        const statusCode = ERROR_STATUS_CODES[error.code] || 500;
-        reply.status(statusCode).send({
-            error: {
-                message: error.message,
-                code: error.code,
-            },
-        });
+    const described = describeHttpError(error);
+    if (described) {
+        sendFailure(reply, described);
         return;
     }
     if (error.validation) {
+        const refusal = { status: 400, code: 'INVALID_INPUT', message: error.message };
         reply.status(400).send({
-            error: {
-                message: error.message,
-                code: 'INVALID_INPUT',
-                details: error.validation,
-            },
+            error: { ...errorEnvelope(refusal).error, details: error.validation },
         });
         return;
     }
     const statusCode = error.statusCode;
     if (typeof statusCode === 'number' && statusCode >= 400 && statusCode < 500) {
-        reply.status(statusCode).send({
-            error: {
-                message: error.message,
-                code: CLIENT_ERROR_CODES[statusCode] ?? error.code ?? 'BAD_REQUEST',
-            },
+        sendFailure(reply, {
+            status: statusCode,
+            code: CLIENT_ERROR_CODES[statusCode] ?? error.code ?? 'BAD_REQUEST',
+            message: error.message,
         });
         return;
     }
     request.log.error({ err: error }, 'unhandled error in cogitator plugin');
-    reply.status(500).send({
-        error: {
-            message: 'Internal server error',
-            code: ErrorCode.INTERNAL_ERROR,
-        },
-    });
+    sendFailure(reply, INTERNAL_ERROR);
 }
 //# sourceMappingURL=error-handler.js.map

package/dist/hooks/error-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../src/hooks/error-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,kBAAkB,GAA2B;IACjD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,qBAAqB;CAC3B,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,KAAmB,EACnB,OAAuB,EACvB,KAAmB;IAEnB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,IAAI,cAAc,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACrB,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,KAAK,CAAC,UAAU;aAC1B;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QAC5E,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;YAC5B,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,aAAa;aACpE;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,qCAAqC,CAAC,CAAC;IAEzE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACrB,KAAK,EAAE;YACL,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,SAAS,CAAC,cAAc;SAC/B;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../src/hooks/error-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,kBAAkB,GAA2B;IACjD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,qBAAqB;CAC3B,CAAC;AAEF,MAAM,UAAU,YAAY,CAC1B,KAAmB,EACnB,OAAuB,EACvB,KAAmB;IAEnB,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/E,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACrB,KAAK,EAAE,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE;SACtE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QAC5E,WAAW,CAAC,KAAK,EAAE;YACjB,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,kBAAkB,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,aAAa;YACnE,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,qCAAqC,CAAC,CAAC;IACzE,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;AACrC,CAAC"}

package/dist/hooks/index.d.ts

@@ -1,3 +1,3 @@
-export { createAuthHook } from './auth.js';
+export { createAnonymousHook, createAuthHook } from './auth.js';
 export { errorHandler } from './error-handler.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/hooks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/hooks/index.js

@@ -1,3 +1,3 @@
-export { createAuthHook } from './auth.js';
+export { createAnonymousHook, createAuthHook } from './auth.js';
 export { errorHandler } from './error-handler.js';
 //# sourceMappingURL=index.js.map

package/dist/hooks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { cogitatorPlugin } from './plugin.js';
-export type { CogitatorPluginOptions, CogitatorContext, AuthContext, AuthFunction, RateLimitConfig, SwaggerConfig, WebSocketConfig, AgentListResponse, AgentRunRequest, AgentRunResponse, AgentResumeRequest, PendingApproval, ThreadResponse, AddMessageRequest, ToolListResponse, WorkflowListResponse, WorkflowRunRequest, WorkflowRunResponse, WorkflowStatusResponse, SwarmListResponse, SwarmRunRequest, SwarmRunResponse, BlackboardResponse, HealthResponse, ReadinessResponse, ReadinessCheckStatus, ErrorResponse, WebSocketMessage, WebSocketResponse, OpenAPISpec, } from './types.js';
-export { AgentRunRequestSchema, AgentRunResponseSchema, AgentResumeRequestSchema, AddMessageRequestSchema, WorkflowRunRequestSchema, SwarmRunRequestSchema, } from './types.js';
+export type { CogitatorPluginOptions, CogitatorContext, AuthContext, AuthFunction, RateLimitConfig, SwaggerConfig, WebSocketConfig, AgentListResponse, AgentRunRequest, AgentRunResponse, AgentResumeRequest, PendingApproval, ThreadResponse, ThreadPageQuery, AddMessageRequest, ToolListResponse, WorkflowListResponse, WorkflowRunRequest, WorkflowRunResponse, WorkflowStatusResponse, SwarmListResponse, SwarmRunRequest, SwarmRunResponse, BlackboardResponse, HealthResponse, ReadinessResponse, ReadinessCheckStatus, ErrorResponse, WebSocketMessage, WebSocketResponse, OpenAPISpec, } from './types.js';
+export { AgentRunRequestSchema, AgentRunResponseSchema, AgentResumeRequestSchema, AddMessageRequestSchema, WorkflowRunRequestSchema, SwarmRunRequestSchema, ThreadPageQuerySchema, ThreadResponseSchema, workflowRunRequestSchema, swarmRunRequestSchema, } from './types.js';
 export { FastifyStreamWriter } from './streaming/index.js';
 export type { FastifyStreamWriterOptions } from './streaming/index.js';
 export type { StreamEvent, Usage } from './streaming/protocol.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,WAAW,GACZ,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEvE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAElE,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 export { cogitatorPlugin } from './plugin.js';
-export { AgentRunRequestSchema, AgentRunResponseSchema, AgentResumeRequestSchema, AddMessageRequestSchema, WorkflowRunRequestSchema, SwarmRunRequestSchema, } from './types.js';
+export { AgentRunRequestSchema, AgentRunResponseSchema, AgentResumeRequestSchema, AddMessageRequestSchema, WorkflowRunRequestSchema, SwarmRunRequestSchema, ThreadPageQuerySchema, ThreadResponseSchema, workflowRunRequestSchema, swarmRunRequestSchema, } from './types.js';
 export { FastifyStreamWriter } from './streaming/index.js';
 export { createStartEvent, createTextStartEvent, createTextDeltaEvent, createTextEndEvent, createReasoningStartEvent, createReasoningDeltaEvent, createReasoningEndEvent, createToolCallStartEvent, createToolCallDeltaEvent, createToolCallEndEvent, createToolResultEvent, createApprovalRequiredEvent, createErrorEvent, createFinishEvent, createWorkflowEvent, createSwarmEvent, } from './streaming/protocol.js';
 export { generateId, encodeSSE, encodeDone } from './streaming/helpers.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAmC9C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAK3D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAoC9C,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAK3D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,SAAS,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAoB,MAAM,YAAY,CAAC;AA0I3E,eAAO,MAAM,eAAe,4CAG1B,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,kBAAkB,EAAgB,MAAM,SAAS,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAoB,MAAM,YAAY,CAAC;AA0J3E,eAAO,MAAM,eAAe,4CAG1B,CAAC"}

package/dist/plugin.js

@@ -1,8 +1,8 @@
 import fp from 'fastify-plugin';
-import { DEFAULT_THREAD_MESSAGE_ROLES, refuseNonJsonBody, resolveSseHeartbeatMs, } from '@cogitator-ai/server-shared';
-import { createAuthHook, errorHandler } from './hooks/index.js';
+import { DEFAULT_THREAD_MESSAGE_ROLES, admitCaller, checkRunLimits, documentStreamEvents, refuseNonJsonBody, resolveSseHeartbeatMs, } from '@cogitator-ai/server-shared';
+import { createAnonymousHook, createAuthHook, errorHandler } from './hooks/index.js';
 import { healthRoutes, agentRoutes, threadRoutes, toolRoutes, workflowRoutes, swarmRoutes, } from './routes/index.js';
-import { isModuleNotFound } from './routes/utils.js';
+import { isModuleNotFound, sendError, sendFailure } from './routes/utils.js';
 const cogitatorPluginImpl = async (fastify, opts) => {
     const context = {
         runtime: opts.cogitator,
@@ -12,6 +12,9 @@ const cogitatorPluginImpl = async (fastify, opts) => {
         sseHeartbeatMs: resolveSseHeartbeatMs(opts.sseHeartbeatMs),
         acceptContext: opts.acceptContext ?? false,
         threadMessageRoles: opts.threadMessageRoles ?? DEFAULT_THREAD_MESSAGE_ROLES,
+        limits: checkRunLimits(opts.limits),
+        authorizeThread: opts.authorizeThread,
+        deps: opts.deps,
     };
     fastify.decorate('cogitator', context);
     fastify.decorateRequest('cogitatorAuth', undefined);
@@ -39,9 +42,7 @@ const cogitatorPluginImpl = async (fastify, opts) => {
             const refusal = refuseNonJsonBody(request.method, request.headers);
             if (!refusal)
                 return;
-            return reply
-                .status(refusal.status)
-                .send({ error: { message: refusal.message, code: refusal.code } });
+            return sendFailure(reply, refusal);
         });
         instance.addHook('onRequest', createAuthHook(opts.auth));
         if (opts.rateLimit) {
@@ -66,6 +67,12 @@ const cogitatorPluginImpl = async (fastify, opts) => {
         instance.setErrorHandler((error, request, reply) => {
             errorHandler(error, request, reply);
         });
+        instance.setNotFoundHandler((request, reply) => {
+            const refusal = admitCaller(request.cogitatorAuth?.userId, opts.anonymous);
+            return refusal
+                ? sendFailure(reply, refusal)
+                : sendError(reply, 404, 'Not found', 'NOT_FOUND');
+        });
         if (opts.enableSwagger) {
             try {
                 const swaggerModule = await import('@fastify/swagger');
@@ -95,6 +102,9 @@ const cogitatorPluginImpl = async (fastify, opts) => {
                             { name: 'health', description: 'Health check endpoints' },
                         ],
                     },
+                    transformObject: (documentObject) => 'openapiObject' in documentObject
+                        ? documentStreamEvents(documentObject.openapiObject)
+                        : documentObject.swaggerObject,
                 });
                 await instance.register(swaggerUiModule.default, {
                     routePrefix: '/docs',
@@ -110,15 +120,18 @@ const cogitatorPluginImpl = async (fastify, opts) => {
             }
         }
         await instance.register(healthRoutes);
-        await instance.register(agentRoutes);
-        await instance.register(threadRoutes);
-        await instance.register(toolRoutes);
-        await instance.register(workflowRoutes);
-        await instance.register(swarmRoutes);
-        if (websocketEnabled) {
-            const { websocketRoutes } = await import('./websocket/handler.js');
-            await instance.register(websocketRoutes, { path: opts.websocket?.path });
-        }
+        await instance.register(async (api) => {
+            api.addHook('onRequest', createAnonymousHook(opts.anonymous));
+            await api.register(agentRoutes);
+            await api.register(threadRoutes);
+            await api.register(toolRoutes);
+            await api.register(workflowRoutes);
+            await api.register(swarmRoutes);
+            if (websocketEnabled) {
+                const { websocketRoutes } = await import('./websocket/handler.js');
+                await api.register(websocketRoutes, { path: opts.websocket?.path });
+            }
+        });
     }, { prefix });
 };
 export const cogitatorPlugin = fp(cogitatorPluginImpl, {

package/dist/plugin.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EACL,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,mBAAmB,GAA+C,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC9F,MAAM,OAAO,GAAqB;QAChC,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,cAAc,EAAE,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC1D,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;QAC1C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,4BAA4B;KAC5E,CAAC;IAEF,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACpD,OAAO,CAAC,eAAe,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;IAE3C,MAAM,OAAO,CAAC,QAAQ,CACpB,KAAK,EAAE,QAAQ,EAAE,EAAE;QACjB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC3D,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACjD,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBACnF,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,KAAK;iBACT,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;iBACtB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;gBAC5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE;oBAC/C,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG;oBACvB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;oBACrC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY;oBACzC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB;iBAC1D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;gBACjF,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,eAAe,CAAC,CAAC,KAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC/D,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACvD,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;gBAE5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE;oBAC7C,OAAO,EAAE;wBACP,IAAI,EAAE;4BACJ,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,eAAe;4BAC7C,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,sBAAsB;4BAChE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,OAAO;4BACzC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;4BAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;yBAC/B;wBACD,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;wBAC/E,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI;4BAChD,UAAU,EAAE;gCACV,eAAe,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;6BACpE;4BACD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;yBACnC,CAAC;wBACF,IAAI,EAAE;4BACJ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;4BACnD,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0BAA0B,EAAE;4BAC5D,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE;4BACjD,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE;4BACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;4BACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC1D;qBACF;iBACF,CAAC,CAAC;gBAEH,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE;oBAC/C,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACxC,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAErC,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;YACnE,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,mBAAmB,EAAE;IACrD,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,uBAAuB;CAC9B,CAAC,CAAC"}
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,WAAW,EACX,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,mBAAmB,GAA+C,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;IAC9F,MAAM,OAAO,GAAqB;QAChC,OAAO,EAAE,IAAI,CAAC,SAAS;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,cAAc,EAAE,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC;QAC1D,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK;QAC1C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,IAAI,4BAA4B;QAC3E,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;QACnC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;IAEF,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAEvC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;IACpD,OAAO,CAAC,eAAe,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,eAAe,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAEjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC;IAE3C,MAAM,OAAO,CAAC,QAAQ,CACpB,KAAK,EAAE,QAAQ,EAAE,EAAE;QACjB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAC3D,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;gBACjD,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBACnF,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;gBAC5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE;oBAC/C,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG;oBACvB,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;oBACrC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY;oBACzC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB;iBAC1D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;gBACjF,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,eAAe,CAAC,CAAC,KAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC/D,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3E,OAAO,OAAO;gBACZ,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;gBAC7B,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACvD,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;gBAE5D,MAAM,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE;oBAC7C,OAAO,EAAE;wBACP,IAAI,EAAE;4BACJ,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,IAAI,eAAe;4BAC7C,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,IAAI,sBAAsB;4BAChE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,OAAO;4BACzC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;4BAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO;yBAC/B;wBACD,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC;wBAC/E,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI;4BAChD,UAAU,EAAE;gCACV,eAAe,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;6BACpE;4BACD,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;yBACnC,CAAC;wBACF,IAAI,EAAE;4BACJ,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;4BACnD,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0BAA0B,EAAE;4BAC5D,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE;4BACjD,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE;4BACzD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;4BACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;yBAC1D;qBACF;oBACD,eAAe,EAAE,CAAC,cAAc,EAAE,EAAE,CAClC,eAAe,IAAI,cAAc;wBAC/B,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,aAAa,CAAC;wBACpD,CAAC,CAAC,cAAc,CAAC,aAAa;iBACnC,CAAC,CAAC;gBAEH,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE;oBAC/C,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBAC1E,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEtC,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACpC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAE9D,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAChC,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACjC,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACnC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAEhC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;gBACnE,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,EACD,EAAE,MAAM,EAAE,CACX,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,mBAAmB,EAAE;IACrD,OAAO,EAAE,KAAK;IACd,IAAI,EAAE,uBAAuB;CAC9B,CAAC,CAAC"}

package/dist/routes/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AA4BlD,eAAO,MAAM,WAAW,EAAE,kBA+HzB,CAAC"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AA+BhF,eAAO,MAAM,WAAW,EAAE,kBAsLzB,CAAC"}