@data-club/ai-hub-server 0.0.1

package/dist/routes/chat.js

@@ -0,0 +1,484 @@
+/**
+ * `/chat/*` — SSE chat, resumption, cancel (§6.3.2).
+ *
+ * Three endpoints:
+ *
+ * - `POST /chat` — body `{ session_id, user_message, effort?, idempotency_key? }`.
+ *   Streams events per §9. Owner-scoped: the caller must own the
+ *   referenced session.
+ * - `GET  /chat/:turn_id/events?from_seq=N` — resumption: replays
+ *   persisted events with `seq > N`, then live-attaches if the turn is
+ *   still active.
+ * - `POST /chat/:turn_id/cancel` — aborts an in-flight turn. Idempotent
+ *   when the turn already terminated.
+ *
+ * The runner (`state/turnRunner.ts`) owns the actual state machine; this
+ * file is the HTTP/SSE shell. The runner publishes events to a live
+ * channel + persists them; the `POST /chat` writer subscribes to the
+ * same channel and ships bytes to the client. The runner's `onEvent`
+ * callback can write directly; this file uses
+ * `subscribeToTurn` because it shares the same plumbing the resumption
+ * endpoint uses.
+ *
+ * @see SPECIFICATIONS.md §6.3.2 — chat (SSE)
+ * @see SPECIFICATIONS.md §6.6 — server-authoritative state
+ * @see SPECIFICATIONS.md §6.9 — cancellation
+ */
+import { eq } from "drizzle-orm";
+import { z } from "zod";
+import { protectedRoute } from "../auth/middleware.js";
+import { messageOverride, session, turn, turnEvent } from "../db/schema.js";
+import { formatSseEvent, formatSseHeartbeat } from "../handlers/sse.js";
+import { errorResponse, jsonResponse, notFound, validationError, } from "../handlers/responses.js";
+import { markCancelled, replayPersistedEvents, runTurn, } from "../state/turnRunner.js";
+import { isTurnLive, requestTurnCancellation, subscribeToTurn, } from "../state/turnRegistry.js";
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  POST /chat                                                                */
+/* ────────────────────────────────────────────────────────────────────────── */
+/** Per-message wire body. `effort` is optional with the §7.4 enum. */
+const postChatSchema = z
+    .object({
+    session_id: z.string().uuid(),
+    user_message: z.string().min(1),
+    effort: z
+        .enum(["none", "minimal", "low", "medium", "high", "extra_high"])
+        .optional(),
+    idempotency_key: z.string().min(1).max(255).optional(),
+    /**
+     * Optional tier-3 customization: the human-facing replacement for
+     * `user_message` in the chat UI. When set, AI hub sends
+     * `user_message` to Letta verbatim (system view) but, after the turn
+     * terminates `done`, writes an override row at the position the
+     * persisted user message landed at so subsequent
+     * `GET /sessions/:id/messages` calls display this string instead.
+     *
+     * Persisted only on `done`. On `cancelled` / `failed`, Letta drops
+     * the user message and we drop the override — no orphan row.
+     */
+    user_override: z.string().optional(),
+})
+    .strict();
+/**
+ * `POST /chat` — opens an SSE stream for the new turn.
+ *
+ * Owner-scoped: returns 404 for sessions not owned by the caller. The
+ * `power_user`+ "all-sessions overview" is a different surface.
+ *
+ * The handler returns a `Response` whose body is a `ReadableStream`. The
+ * runner runs in the background, posts events to the registry's live
+ * channel, and the stream subscriber writes them out as `event:`/`data:`
+ * pairs. The runner returns after the stream's terminal event is
+ * persisted; the writer closes the stream shortly after.
+ *
+ * @see SPECIFICATIONS.md §6.3.2
+ * @see SPECIFICATIONS.md §9 — wire protocol
+ */
+export const handlePostChat = protectedRoute({}, async (req, ctx, auth) => {
+    let raw;
+    try {
+        raw = await req.json();
+    }
+    catch {
+        return validationError("Request body must be valid JSON.");
+    }
+    const parsed = postChatSchema.safeParse(raw);
+    if (!parsed.success) {
+        const issue = parsed.error.issues[0];
+        return validationError(issue?.message ?? "Invalid request body.");
+    }
+    const body = parsed.data;
+    // Owner-scope check.
+    const row = ctx.db
+        .select()
+        .from(session)
+        .where(eq(session.id, body.session_id))
+        .get();
+    if (!row || row.userId !== auth.user.id)
+        return notFound();
+    if (row.isArchived) {
+        return errorResponse(409, "session_archived", "Cannot post to an archived session — unarchive it first.");
+    }
+    // Honor client disconnects: when the request's signal aborts, the
+    // runner's signal aborts too, which closes the upstream Letta call.
+    const requestSignal = req.signal;
+    // We need to know the turn id for the response headers. The runner
+    // assigns it at row-insert time; capture it from the `stream_start`
+    // event the runner emits first.
+    const stream = new ReadableStream({
+        async start(controller) {
+            let started = false;
+            const writeEvent = (event) => {
+                try {
+                    controller.enqueue(formatSseEvent(event));
+                    started = true;
+                }
+                catch {
+                    /* writer was closed (client disconnected) — ignore */
+                }
+            };
+            // Periodic heartbeat (§9.1) — every 10 s. Keeps proxies from
+            // closing the connection during long idle phases (tool exec,
+            // 429 wait).
+            const heartbeat = setInterval(() => {
+                try {
+                    controller.enqueue(formatSseHeartbeat());
+                }
+                catch {
+                    /* writer was closed — clear and bail */
+                    clearInterval(heartbeat);
+                }
+            }, 10_000);
+            const runnerOpts = {
+                db: ctx.db,
+                lettaClient: ctx.lettaClient,
+                logger: ctx.logger,
+                requestId: ctx.logger
+                    .bindings?.()?.["request_id"] ?? "",
+                userId: auth.user.id,
+                sessionId: row.id,
+                lettaConversationId: row.lettaConversationId,
+                lettaAgentId: row.lettaAgentId,
+                sandboxDir: row.sandboxDir,
+                userMessage: body.user_message,
+                ...(body.effort !== undefined ? { effort: body.effort } : {}),
+                ...(body.idempotency_key !== undefined ? { idempotencyKey: body.idempotency_key } : {}),
+                onEvent: (event) => {
+                    if (event === null) {
+                        clearInterval(heartbeat);
+                        try {
+                            controller.close();
+                        }
+                        catch {
+                            /* already closed */
+                        }
+                        return;
+                    }
+                    writeEvent(event);
+                },
+                signal: requestSignal,
+            };
+            // Run the turn. We don't await here — the runner pushes events
+            // via `onEvent`; we keep the stream open until it completes.
+            // But we DO need to catch errors so the stream doesn't dangle if
+            // the runner throws before emitting `stream_end`.
+            //
+            // The `.then` chain handles the tier-3 `user_override` parameter:
+            // after the turn terminates `done`, we list Letta's messages to
+            // find the position the persisted user message landed at, then
+            // upsert an override row so `GET /sessions/:id/messages` will
+            // display `user_override` in place of the wrapped Letta content.
+            // We deliberately don't write on `cancelled` / `failed` — in
+            // those cases Letta drops the user message and a persisted
+            // override would point at nothing.
+            runTurn(runnerOpts)
+                .then(async (result) => {
+                if (result.status !== "done")
+                    return;
+                if (body.user_override === undefined)
+                    return;
+                try {
+                    const messages = await ctx.lettaClient.listMessages(row.lettaConversationId);
+                    // Position = chronologically-sorted index of the latest
+                    // user_message authored by this caller. Letta is the
+                    // source of truth — we don't trust message ordering on
+                    // any other axis.
+                    const sorted = [...messages].sort((a, b) => {
+                        const aT = Date.parse(a.date ?? "");
+                        const bT = Date.parse(b.date ?? "");
+                        if (Number.isNaN(aT) && Number.isNaN(bT))
+                            return 0;
+                        if (Number.isNaN(aT))
+                            return 1;
+                        if (Number.isNaN(bT))
+                            return -1;
+                        return aT - bT;
+                    });
+                    let position = -1;
+                    for (let i = sorted.length - 1; i >= 0; i--) {
+                        const msg = sorted[i];
+                        if (msg.message_type === "user_message" && msg.sender_id === auth.user.id) {
+                            position = i;
+                            break;
+                        }
+                    }
+                    if (position < 0) {
+                        ctx.logger.warn({
+                            event: "user_override_post_turn_no_user_message",
+                            session_id: row.id,
+                        }, "Turn ended `done` but no matching user_message was found in Letta — skipping override write.");
+                        return;
+                    }
+                    const now = new Date().toISOString();
+                    ctx.db
+                        .insert(messageOverride)
+                        .values({
+                        conversationId: row.lettaConversationId,
+                        ordinalPosition: position,
+                        systemOverride: null,
+                        userOverride: body.user_override,
+                        createdAt: now,
+                        updatedAt: now,
+                    })
+                        .onConflictDoUpdate({
+                        target: [messageOverride.conversationId, messageOverride.ordinalPosition],
+                        // Merge: only overwrite the user_override layer. Preserve
+                        // any system_override an earlier PUT might have written.
+                        set: { userOverride: body.user_override, updatedAt: now },
+                    })
+                        .run();
+                    ctx.logger.info({
+                        event: "user_override_post_turn_written",
+                        session_id: row.id,
+                        ordinal_position: position,
+                    }, "Wrote user_override after successful turn.");
+                }
+                catch (err) {
+                    // Non-fatal: the chat already succeeded. Log and move on.
+                    ctx.logger.error({
+                        event: "user_override_post_turn_failed",
+                        session_id: row.id,
+                        err: err instanceof Error ? err.message : String(err),
+                    }, "Failed to write user_override post-turn.");
+                }
+            })
+                .catch((err) => {
+                ctx.logger.error({ event: "turn_runner_threw", err: err instanceof Error ? err.message : String(err) }, "Turn runner threw outside the normal lifecycle.");
+                clearInterval(heartbeat);
+                if (!started) {
+                    // No stream_start emitted — close abruptly. The client will
+                    // see a connection-error and may retry.
+                    try {
+                        controller.close();
+                    }
+                    catch {
+                        /* ignored */
+                    }
+                }
+            });
+        },
+    });
+    return new Response(stream, {
+        status: 200,
+        headers: {
+            "Content-Type": "text/event-stream; charset=utf-8",
+            "Cache-Control": "no-cache, no-transform",
+            "Connection": "keep-alive",
+            "X-Accel-Buffering": "no",
+        },
+    });
+});
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  GET /chat/:turn_id/events?from_seq=N                                       */
+/* ────────────────────────────────────────────────────────────────────────── */
+/**
+ * `GET /chat/:turn_id/events?from_seq=N` — resumption.
+ *
+ * Two-phase:
+ *
+ * 1. Replay persisted `turn_event` rows with `seq > N`, in order.
+ * 2. If the turn is still live, attach to the in-memory broadcaster so
+ *    new events stream through. If the turn is terminal, the response
+ *    closes after the replay.
+ *
+ * Owner-scoped: the caller must own the parent session (the admin
+ * "sessions overview" doesn't go through this endpoint — that's a
+ * separate JSON read).
+ *
+ * @see SPECIFICATIONS.md §6.3.2 — resumption
+ */
+export const handleGetChatEvents = protectedRoute({}, async (req, ctx, auth, params) => {
+    const turnId = params.turn_id;
+    if (!turnId)
+        return notFound();
+    const turnRow = ctx.db.select().from(turn).where(eq(turn.id, turnId)).get();
+    if (!turnRow)
+        return notFound();
+    const sessionRow = ctx.db
+        .select()
+        .from(session)
+        .where(eq(session.id, turnRow.sessionId))
+        .get();
+    if (!sessionRow || sessionRow.userId !== auth.user.id)
+        return notFound();
+    const url = new URL(req.url);
+    const fromSeqRaw = url.searchParams.get("from_seq");
+    const fromSeq = fromSeqRaw === null ? -1 : Number.parseInt(fromSeqRaw, 10);
+    if (Number.isNaN(fromSeq)) {
+        return validationError("from_seq must be an integer.", "invalid_from_seq");
+    }
+    const requestSignal = req.signal;
+    const turnIsLive = isTurnLive(turnId);
+    const stream = new ReadableStream({
+        start(controller) {
+            let closed = false;
+            const safeWrite = (event) => {
+                if (closed)
+                    return;
+                try {
+                    controller.enqueue(formatSseEvent(event));
+                }
+                catch {
+                    closed = true;
+                }
+            };
+            const safeClose = () => {
+                if (closed)
+                    return;
+                closed = true;
+                try {
+                    controller.close();
+                }
+                catch {
+                    /* ignored */
+                }
+            };
+            // Phase 1 — replay every persisted event with seq > fromSeq.
+            const replayed = replayPersistedEvents(ctx.db, turnId, fromSeq);
+            let highestSeqWritten = fromSeq;
+            for (const event of replayed) {
+                safeWrite(event);
+                if (event.seq > highestSeqWritten)
+                    highestSeqWritten = event.seq;
+            }
+            // Phase 2 — live-attach (only if the turn is still running).
+            if (!turnIsLive) {
+                safeClose();
+                return;
+            }
+            const unsubscribe = subscribeToTurn(turnId, (event) => {
+                // De-duplicate against the replay window. Events with seq <=
+                // highestSeqWritten were either already replayed or are stale
+                // re-broadcasts; the runner never re-emits, but we guard
+                // defensively.
+                if (event.seq <= highestSeqWritten)
+                    return;
+                highestSeqWritten = event.seq;
+                safeWrite(event);
+            }, () => {
+                safeClose();
+            });
+            if (!unsubscribe) {
+                // Turn went terminal between our `isTurnLive` check and
+                // subscription. Re-read any events that arrived in the gap
+                // and close.
+                const tail = replayPersistedEvents(ctx.db, turnId, highestSeqWritten);
+                for (const event of tail)
+                    safeWrite(event);
+                safeClose();
+                return;
+            }
+            const onAbort = () => {
+                unsubscribe();
+                safeClose();
+            };
+            if (requestSignal.aborted)
+                onAbort();
+            else
+                requestSignal.addEventListener("abort", onAbort, { once: true });
+        },
+    });
+    return new Response(stream, {
+        status: 200,
+        headers: {
+            "Content-Type": "text/event-stream; charset=utf-8",
+            "Cache-Control": "no-cache, no-transform",
+            "Connection": "keep-alive",
+            "X-Accel-Buffering": "no",
+        },
+    });
+});
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  POST /chat/:turn_id/cancel                                                */
+/* ────────────────────────────────────────────────────────────────────────── */
+/**
+ * `POST /chat/:turn_id/cancel` — aborts an in-flight turn authoritatively.
+ *
+ * Owner-scoped via the parent session. Idempotent — calling it on a
+ * terminal turn returns the same envelope as the first call (no error,
+ * the existing status is reported as `already_terminal`).
+ *
+ * Two cancellation paths fire here, in order:
+ *
+ * 1. **Letta-side cancel** — `client.agents.messages.cancel({ run_ids })`.
+ *    This is the load-bearing one: it tells Letta to stop the run
+ *    server-side and roll back the in-progress step from the
+ *    conversation history (completed steps survive). **Without this,
+ *    aborting only our SDK call's HTTP connection does nothing** —
+ *    Letta keeps generating, persists the full output, and the user's
+ *    refresh reveals it. Empirically verified.
+ *
+ * 2. **Local registry cancel** — `requestTurnCancellation(turnId)`. Fires
+ *    our runner's AbortSignal so the in-process for-await loop exits
+ *    cleanly + emits `stream_end{reason:"cancelled"}`. Also serves as
+ *    the fallback when (1) fails (network blip, Letta-side error, run
+ *    already terminal): the client still gets a clean terminal event.
+ *
+ * Race-free ordering: we fire (1) first so Letta has begun winding the
+ * run down by the time (2) fires; the few final events Letta delivers
+ * during that window flow through the runner's stream naturally before
+ * the abort lands.
+ *
+ * @see SPECIFICATIONS.md §6.3.2
+ * @see SPECIFICATIONS.md §6.9 — cancellation
+ */
+export const handlePostChatCancel = protectedRoute({}, async (_req, ctx, auth, params) => {
+    const turnId = params.turn_id;
+    if (!turnId)
+        return notFound();
+    const turnRow = ctx.db.select().from(turn).where(eq(turn.id, turnId)).get();
+    if (!turnRow)
+        return notFound();
+    const sessionRow = ctx.db
+        .select()
+        .from(session)
+        .where(eq(session.id, turnRow.sessionId))
+        .get();
+    if (!sessionRow || sessionRow.userId !== auth.user.id)
+        return notFound();
+    if (turnRow.status !== "running") {
+        return jsonResponse(200, {
+            turn_id: turnId,
+            status: turnRow.status,
+            was_already_terminal: true,
+        });
+    }
+    // Cancel via the runner's `ChatTurnHandle.abort()` —
+    // `requestTurnCancellation` fires the registry's AbortController,
+    // the runner listens for it and translates into a Letta-Code-SDK
+    // `session.abort()` call (which sends `interrupt` to the spawned
+    // CLI subprocess). Pre-migration this also called Letta server's
+    // `agents.messages.cancel({run_ids})` directly via a captured
+    // `lettaRunId`; the SDK abstracts that now and we no longer
+    // thread run-ids through the runner. See migration §4.2.
+    //
+    // Behavioral caveat (migration §7 open question 5): if the spawned
+    // CLI is mid-tool-execution, the interrupt may be queued, not
+    // honored, and the tool runs to completion. The runner emits
+    // `stream_end{cancelled}` regardless once the upstream terminal
+    // result lands, so the React client gets a clean cancel event
+    // even when the run effectively completed.
+    const aborted = requestTurnCancellation(turnId);
+    let finalStatus = turnRow.status;
+    if (!aborted) {
+        const fresh = ctx.db.select().from(turn).where(eq(turn.id, turnId)).get();
+        finalStatus = fresh?.status ?? "cancelled";
+    }
+    else {
+        finalStatus = "cancelled";
+        markCancelled(ctx.db, turnId);
+    }
+    return jsonResponse(200, {
+        turn_id: turnId,
+        status: finalStatus,
+        was_already_terminal: false,
+    });
+});
+/* ────────────────────────────────────────────────────────────────────────── */
+/*  Re-exports                                                                */
+/* ────────────────────────────────────────────────────────────────────────── */
+// Re-exported here for the tests that exercise the persisted-event log
+// directly without going through HTTP.
+export { replayPersistedEvents };
+// Used by integration tests that need to read turn_event rows directly.
+export { turnEvent };
+//# sourceMappingURL=chat.js.map

package/dist/routes/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../src/routes/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,OAAO,GAER,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,UAAU,EACV,uBAAuB,EACvB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,sEAAsE;AACtE,MAAM,cAAc,GAAG,CAAC;KACrB,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC;SACN,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;SAChE,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD;;;;;;;;;;OAUG;IACH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,cAAc,GAAiB,cAAc,CACxD,EAAE,EACF,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACvB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC,kCAAkC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,eAAe,CAAC,KAAK,EAAE,OAAO,IAAI,uBAAuB,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAEzB,qBAAqB;IACrB,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE;SACf,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;SACtC,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,EAAE,CAAC;IAC3D,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,OAAO,aAAa,CAClB,GAAG,EACH,kBAAkB,EAClB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,oEAAoE;IACpE,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC;IAEjC,mEAAmE;IACnE,oEAAoE;IACpE,gCAAgC;IAChC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;QAC5C,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1C,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC,CAAC;YAEF,6DAA6D;YAC7D,6DAA6D;YAC7D,aAAa;YACb,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBACjC,IAAI,CAAC;oBACH,UAAU,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,wCAAwC;oBACxC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,UAAU,GAAgB;gBAC9B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAG,GAAG,CAAC,MAAkE;qBAC/E,QAAQ,EAAE,EACX,EAAE,CAAC,YAAY,CAAW,IAAI,EAAE;gBAClC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;gBACpB,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,mBAAmB,EAAE,GAAG,CAAC,mBAAmB;gBAC5C,YAAY,EAAE,GAAG,CAAC,YAAY;gBAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvF,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,aAAa,CAAC,SAAS,CAAC,CAAC;wBACzB,IAAI,CAAC;4BACH,UAAU,CAAC,KAAK,EAAE,CAAC;wBACrB,CAAC;wBAAC,MAAM,CAAC;4BACP,oBAAoB;wBACtB,CAAC;wBACD,OAAO;oBACT,CAAC;oBACD,UAAU,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC;gBACD,MAAM,EAAE,aAAa;aACtB,CAAC;YAEF,+DAA+D;YAC/D,6DAA6D;YAC7D,iEAAiE;YACjE,kDAAkD;YAClD,EAAE;YACF,kEAAkE;YAClE,gEAAgE;YAChE,+DAA+D;YAC/D,8DAA8D;YAC9D,iEAAiE;YACjE,6DAA6D;YAC7D,2DAA2D;YAC3D,mCAAmC;YACnC,OAAO,CAAC,UAAU,CAAC;iBAChB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrB,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO;gBACrC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;oBAAE,OAAO;gBAC7C,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBAC7E,wDAAwD;oBACxD,qDAAqD;oBACrD,uDAAuD;oBACvD,kBAAkB;oBAClB,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBACzC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAE,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;wBAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAE,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;wBAC3D,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;4BAAE,OAAO,CAAC,CAAC;wBACnD,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;4BAAE,OAAO,CAAC,CAAC;wBAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;4BAAE,OAAO,CAAC,CAAC,CAAC;wBAChC,OAAO,EAAE,GAAG,EAAE,CAAC;oBACjB,CAAC,CAAC,CAAC;oBACH,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;oBAClB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAyD,CAAC;wBAC9E,IAAI,GAAG,CAAC,YAAY,KAAK,cAAc,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;4BAC1E,QAAQ,GAAG,CAAC,CAAC;4BACb,MAAM;wBACR,CAAC;oBACH,CAAC;oBACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;wBACjB,GAAG,CAAC,MAAM,CAAC,IAAI,CACb;4BACE,KAAK,EAAE,yCAAyC;4BAChD,UAAU,EAAE,GAAG,CAAC,EAAE;yBACnB,EACD,8FAA8F,CAC/F,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBACrC,GAAG,CAAC,EAAE;yBACH,MAAM,CAAC,eAAe,CAAC;yBACvB,MAAM,CAAC;wBACN,cAAc,EAAE,GAAG,CAAC,mBAAmB;wBACvC,eAAe,EAAE,QAAQ;wBACzB,cAAc,EAAE,IAAI;wBACpB,YAAY,EAAE,IAAI,CAAC,aAAa;wBAChC,SAAS,EAAE,GAAG;wBACd,SAAS,EAAE,GAAG;qBACf,CAAC;yBACD,kBAAkB,CAAC;wBAClB,MAAM,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,eAAe,CAAC,eAAe,CAAC;wBACzE,0DAA0D;wBAC1D,yDAAyD;wBACzD,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE;qBAC1D,CAAC;yBACD,GAAG,EAAE,CAAC;oBACT,GAAG,CAAC,MAAM,CAAC,IAAI,CACb;wBACE,KAAK,EAAE,iCAAiC;wBACxC,UAAU,EAAE,GAAG,CAAC,EAAE;wBAClB,gBAAgB,EAAE,QAAQ;qBAC3B,EACD,4CAA4C,CAC7C,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,0DAA0D;oBAC1D,GAAG,CAAC,MAAM,CAAC,KAAK,CACd;wBACE,KAAK,EAAE,gCAAgC;wBACvC,UAAU,EAAE,GAAG,CAAC,EAAE;wBAClB,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;qBACtD,EACD,0CAA0C,CAC3C,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACf,GAAG,CAAC,MAAM,CAAC,KAAK,CACd,EAAE,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EACrF,iDAAiD,CAClD,CAAC;gBACF,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzB,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,4DAA4D;oBAC5D,wCAAwC;oBACxC,IAAI,CAAC;wBACH,UAAU,CAAC,KAAK,EAAE,CAAC;oBACrB,CAAC;oBAAC,MAAM,CAAC;wBACP,aAAa;oBACf,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,kCAAkC;YAClD,eAAe,EAAE,wBAAwB;YACzC,YAAY,EAAE,YAAY;YAC1B,mBAAmB,EAAE,IAAI;SAC1B;KACF,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,gFAAgF;AAChF,iFAAiF;AACjF,gFAAgF;AAEhF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB,cAAc,CAC7D,EAAE,EACF,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,EAAE,CAAC;IAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5E,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;SACxC,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,EAAE,CAAC;IAEzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GACX,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,eAAe,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC;IACjC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAI,cAAc,CAAa;QAC5C,KAAK,CAAC,UAAU;YACd,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAE,EAAE;gBACtC,IAAI,MAAM;oBAAE,OAAO;gBACnB,IAAI,CAAC;oBACH,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5C,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,SAAS,GAAG,GAAG,EAAE;gBACrB,IAAI,MAAM;oBAAE,OAAO;gBACnB,MAAM,GAAG,IAAI,CAAC;gBACd,IAAI,CAAC;oBACH,UAAU,CAAC,KAAK,EAAE,CAAC;gBACrB,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa;gBACf,CAAC;YACH,CAAC,CAAC;YAEF,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,iBAAiB,GAAG,OAAO,CAAC;YAChC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,SAAS,CAAC,KAAK,CAAC,CAAC;gBACjB,IAAI,KAAK,CAAC,GAAG,GAAG,iBAAiB;oBAAE,iBAAiB,GAAG,KAAK,CAAC,GAAG,CAAC;YACnE,CAAC;YAED,6DAA6D;YAC7D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,eAAe,CACjC,MAAM,EACN,CAAC,KAAK,EAAE,EAAE;gBACR,6DAA6D;gBAC7D,8DAA8D;gBAC9D,yDAAyD;gBACzD,eAAe;gBACf,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB;oBAAE,OAAO;gBAC3C,iBAAiB,GAAG,KAAK,CAAC,GAAG,CAAC;gBAC9B,SAAS,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,EACD,GAAG,EAAE;gBACH,SAAS,EAAE,CAAC;YACd,CAAC,CACF,CAAC;YAEF,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,wDAAwD;gBACxD,2DAA2D;gBAC3D,aAAa;gBACb,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;gBACtE,KAAK,MAAM,KAAK,IAAI,IAAI;oBAAE,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC3C,SAAS,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,WAAW,EAAE,CAAC;gBACd,SAAS,EAAE,CAAC;YACd,CAAC,CAAC;YACF,IAAI,aAAa,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;;gBAChC,aAAa,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,kCAAkC;YAClD,eAAe,EAAE,wBAAwB;YACzC,YAAY,EAAE,YAAY;YAC1B,mBAAmB,EAAE,IAAI;SAC1B;KACF,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAiB,cAAc,CAC9D,EAAE,EACF,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,EAAE,CAAC;IAE/B,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5E,IAAI,CAAC,OAAO;QAAE,OAAO,QAAQ,EAAE,CAAC;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE;SACtB,MAAM,EAAE;SACR,IAAI,CAAC,OAAO,CAAC;SACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;SACxC,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,EAAE,CAAC;IAEzE,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,oBAAoB,EAAE,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,qDAAqD;IACrD,kEAAkE;IAClE,iEAAiE;IACjE,iEAAiE;IACjE,iEAAiE;IACjE,8DAA8D;IAC9D,4DAA4D;IAC5D,yDAAyD;IACzD,EAAE;IACF,mEAAmE;IACnE,8DAA8D;IAC9D,6DAA6D;IAC7D,gEAAgE;IAChE,8DAA8D;IAC9D,2CAA2C;IAC3C,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,WAAW,GAAe,OAAO,CAAC,MAAM,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC1E,WAAW,GAAG,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,WAAW,CAAC;QAC1B,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,WAAW;QACnB,oBAAoB,EAAE,KAAK;KAC5B,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAEhF,uEAAuE;AACvE,uCAAuC;AACvC,OAAO,EAAE,qBAAqB,EAAE,CAAC;AACjC,wEAAwE;AACxE,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/routes/featureToggles.d.ts

@@ -0,0 +1,34 @@
+/**
+ * `GET /feature-toggles` — public read of the deployment-wide UI feature
+ * toggles set by `super_admin` (§8.4).
+ *
+ * Unlike `/admin/settings/feature-toggles`, this endpoint is **unauthenticated**
+ * — every page-load can fetch it before login completes, and every role can
+ * read it after login. The blob itself is non-sensitive: it controls which
+ * UI affordances render in the chat shell, not any data. Keeping the read
+ * public matches the precedence rule in §8.4 ("server toggle > React prop >
+ * built-in default") — the toggles need to apply at render time on every
+ * user's UI, not only super_admin's. Writes remain super_admin-only via
+ * `PATCH /admin/settings/feature-toggles`.
+ *
+ * Missing keys are returned as absent in the response (not coerced to false)
+ * so the client can distinguish "explicitly off" from "fall through to the
+ * React prop default."
+ *
+ * @see SPECIFICATIONS.md §8.4 — feature toggles
+ * @see ui-sketches/08-admin-settings.md — feature_toggles_section
+ */
+import type { RouteHandler } from "../handlers/types.js";
+/**
+ * `GET /feature-toggles` — returns `{ feature_toggles: {...} }`.
+ *
+ * No auth required. Every authenticated AND unauthenticated request gets
+ * the same response. CORS is governed by the framework wrapper; the handler
+ * itself only writes JSON.
+ *
+ * @param _req - the inbound request (unused).
+ * @param ctx - the server context.
+ * @returns 200 with the toggles blob, or 500 if the singleton row is missing.
+ */
+export declare const handleGetPublicFeatureToggles: RouteHandler;
+//# sourceMappingURL=featureToggles.d.ts.map

package/dist/routes/featureToggles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"featureToggles.d.ts","sourceRoot":"","sources":["../../src/routes/featureToggles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,EAAE,YAa3C,CAAC"}

package/dist/routes/featureToggles.js

@@ -0,0 +1,47 @@
+/**
+ * `GET /feature-toggles` — public read of the deployment-wide UI feature
+ * toggles set by `super_admin` (§8.4).
+ *
+ * Unlike `/admin/settings/feature-toggles`, this endpoint is **unauthenticated**
+ * — every page-load can fetch it before login completes, and every role can
+ * read it after login. The blob itself is non-sensitive: it controls which
+ * UI affordances render in the chat shell, not any data. Keeping the read
+ * public matches the precedence rule in §8.4 ("server toggle > React prop >
+ * built-in default") — the toggles need to apply at render time on every
+ * user's UI, not only super_admin's. Writes remain super_admin-only via
+ * `PATCH /admin/settings/feature-toggles`.
+ *
+ * Missing keys are returned as absent in the response (not coerced to false)
+ * so the client can distinguish "explicitly off" from "fall through to the
+ * React prop default."
+ *
+ * @see SPECIFICATIONS.md §8.4 — feature toggles
+ * @see ui-sketches/08-admin-settings.md — feature_toggles_section
+ */
+import { eq } from "drizzle-orm";
+import { adminSetting } from "../db/schema.js";
+import { internalError, jsonResponse } from "../handlers/responses.js";
+/**
+ * `GET /feature-toggles` — returns `{ feature_toggles: {...} }`.
+ *
+ * No auth required. Every authenticated AND unauthenticated request gets
+ * the same response. CORS is governed by the framework wrapper; the handler
+ * itself only writes JSON.
+ *
+ * @param _req - the inbound request (unused).
+ * @param ctx - the server context.
+ * @returns 200 with the toggles blob, or 500 if the singleton row is missing.
+ */
+export const handleGetPublicFeatureToggles = async (_req, ctx) => {
+    const row = ctx.db
+        .select()
+        .from(adminSetting)
+        .where(eq(adminSetting.id, 1))
+        .get();
+    if (!row)
+        return internalError();
+    return jsonResponse(200, {
+        feature_toggles: row.featureToggles ?? {},
+    });
+};
+//# sourceMappingURL=featureToggles.js.map

package/dist/routes/featureToggles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"featureToggles.js","sourceRoot":"","sources":["../../src/routes/featureToggles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAGvE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAiB,KAAK,EAC9D,IAAI,EACJ,GAAG,EACH,EAAE;IACF,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE;SACf,MAAM,EAAE;SACR,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;SAC7B,GAAG,EAAE,CAAC;IACT,IAAI,CAAC,GAAG;QAAE,OAAO,aAAa,EAAE,CAAC;IACjC,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,eAAe,EAAE,GAAG,CAAC,cAAc,IAAI,EAAE;KAC1C,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/routes/health.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `/health` and `/health/ready` handlers.
+ *
+ * Step 2 ships the basic shapes:
+ *
+ * - `/health` — pure liveness, no checks. Returns 200 always (the process is
+ *   up; that's the only signal a liveness probe needs).
+ * - `/health/ready` — readiness. Step 2 checks DB reachability via a trivial
+ *   `SELECT 1`. **Letta reachability is intentionally NOT checked here** —
+ *   the Letta SDK comes online in Step 5, which extends this handler.
+ *
+ * @see SPECIFICATIONS.md §6.3.5 — health endpoints
+ */
+import type { RouteHandler } from "../handlers/types.js";
+/** `GET /health` — returns 200 with a static body. */
+export declare const handleHealth: RouteHandler;
+/**
+ * `GET /health/ready` — runs each readiness probe in turn. Returns 503
+ * with the first failing probe's name on any failure.
+ *
+ * Step 2 checks `db`. Step 5 will append `letta`.
+ */
+export declare const handleHealthReady: RouteHandler;
+//# sourceMappingURL=health.d.ts.map

package/dist/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,sDAAsD;AACtD,eAAO,MAAM,YAAY,EAAE,YACU,CAAC;AAEtC;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,YAW/B,CAAC"}

package/dist/routes/health.js

@@ -0,0 +1,37 @@
+/**
+ * `/health` and `/health/ready` handlers.
+ *
+ * Step 2 ships the basic shapes:
+ *
+ * - `/health` — pure liveness, no checks. Returns 200 always (the process is
+ *   up; that's the only signal a liveness probe needs).
+ * - `/health/ready` — readiness. Step 2 checks DB reachability via a trivial
+ *   `SELECT 1`. **Letta reachability is intentionally NOT checked here** —
+ *   the Letta SDK comes online in Step 5, which extends this handler.
+ *
+ * @see SPECIFICATIONS.md §6.3.5 — health endpoints
+ */
+import { jsonResponse, errorResponse } from "../handlers/responses.js";
+/** `GET /health` — returns 200 with a static body. */
+export const handleHealth = async () => jsonResponse(200, { status: "ok" });
+/**
+ * `GET /health/ready` — runs each readiness probe in turn. Returns 503
+ * with the first failing probe's name on any failure.
+ *
+ * Step 2 checks `db`. Step 5 will append `letta`.
+ */
+export const handleHealthReady = async (_req, ctx) => {
+    try {
+        ctx.sqlite.prepare("SELECT 1 AS ok").get();
+    }
+    catch (err) {
+        ctx.logger.error({ component: "db", err: errMessage(err) }, "Readiness probe failed: db unreachable.");
+        return errorResponse(503, "not_ready", "Database unreachable");
+    }
+    return jsonResponse(200, { status: "ready", checks: { db: "ok" } });
+};
+/** Extracts a string for logging from any thrown value. */
+function errMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=health.js.map