@evermore.work/server 2026.509.0-canary.0

package/dist/adapters/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/adapters/utils.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,WAAW,MAAM,2CAA2C,CAAC;AACzE,YAAY,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAElF,KAAK,gCAAgC,GAAG;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxD,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CACrF,CAAC;AAC/B,eAAO,MAAM,iBAAiB,QAAgC,CAAC;AAC/D,eAAO,MAAM,iBAAiB,QAAgC,CAAC;AAC/D,eAAO,MAAM,WAAW,gCAA0B,CAAC;AACnD,eAAO,MAAM,QAAQ,6BAAuB,CAAC;AAC7C,eAAO,MAAM,QAAQ,6BAAuB,CAAC;AAC7C,eAAO,MAAM,SAAS,8BAAwB,CAAC;AAC/C,eAAO,MAAM,aAAa,kCAA4B,CAAC;AACvD,eAAO,MAAM,SAAS,8BAAwB,CAAC;AAC/C,eAAO,MAAM,aAAa,kCAA4B,CAAC;AACvD,eAAO,MAAM,iBAAiB,sCAAgC,CAAC;AAC/D,eAAO,MAAM,gBAAgB,qCAA+B,CAAC;AAC7D,eAAO,MAAM,cAAc,mCAA6B,CAAC;AACzD,eAAO,MAAM,gBAAgB,qCAA+B,CAAC;AAC7D,eAAO,MAAM,gBAAgB,qCAA+B,CAAC;AAC7D,eAAO,MAAM,sBAAsB,2CAAqC,CAAC;AACzE,eAAO,MAAM,eAAe,oCAA8B,CAAC;AAC3D,eAAO,MAAM,uBAAuB,4CAAsC,CAAC;AAC3E,eAAO,MAAM,uBAAuB,4CAAsC,CAAC;AAC3E,eAAO,MAAM,qBAAqB,0CAAoC,CAAC;AAEvE,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,OAAO,GAAE,gCAAqC,GAC7C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA+BxB;AAGD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAGlF,wBAAsB,eAAe,CACnC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;IACJ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE,GACA,OAAO,CAAC,gBAAgB,CAAC,CAK3B"}

package/dist/adapters/utils.js

@@ -0,0 +1,52 @@
+import { logger } from "../middleware/logger.js";
+import * as serverUtils from "@evermore.work/adapter-utils/server-utils";
+export const runningProcesses = serverUtils.runningProcesses;
+export const MAX_CAPTURE_BYTES = serverUtils.MAX_CAPTURE_BYTES;
+export const MAX_EXCERPT_BYTES = serverUtils.MAX_EXCERPT_BYTES;
+export const parseObject = serverUtils.parseObject;
+export const asString = serverUtils.asString;
+export const asNumber = serverUtils.asNumber;
+export const asBoolean = serverUtils.asBoolean;
+export const asStringArray = serverUtils.asStringArray;
+export const parseJson = serverUtils.parseJson;
+export const appendWithCap = serverUtils.appendWithCap;
+export const appendWithByteCap = serverUtils.appendWithByteCap;
+export const resolvePathValue = serverUtils.resolvePathValue;
+export const renderTemplate = serverUtils.renderTemplate;
+export const redactEnvForLogs = serverUtils.redactEnvForLogs;
+export const buildEvermoreEnv = serverUtils.buildEvermoreEnv;
+export const defaultPathForPlatform = serverUtils.defaultPathForPlatform;
+export const ensurePathInEnv = serverUtils.ensurePathInEnv;
+export const ensureAbsoluteDirectory = serverUtils.ensureAbsoluteDirectory;
+export const ensureCommandResolvable = serverUtils.ensureCommandResolvable;
+export const resolveCommandForLogs = serverUtils.resolveCommandForLogs;
+export function buildInvocationEnvForLogs(env, options = {}) {
+    const maybeBuildInvocationEnvForLogs = serverUtils.buildInvocationEnvForLogs;
+    if (typeof maybeBuildInvocationEnvForLogs === "function") {
+        return maybeBuildInvocationEnvForLogs(env, options);
+    }
+    const merged = { ...env };
+    const runtimeEnv = options.runtimeEnv ?? {};
+    for (const key of options.includeRuntimeKeys ?? []) {
+        if (key in merged)
+            continue;
+        const value = runtimeEnv[key];
+        if (typeof value !== "string" || value.length === 0)
+            continue;
+        merged[key] = value;
+    }
+    const resolvedCommand = options.resolvedCommand?.trim();
+    if (resolvedCommand) {
+        merged[options.resolvedCommandEnvKey ?? "EVERMORE_RESOLVED_COMMAND"] =
+            serverUtils.redactCommandTextForLogs(resolvedCommand);
+    }
+    return redactEnvForLogs(merged);
+}
+const _runChildProcess = serverUtils.runChildProcess;
+export async function runChildProcess(runId, command, args, opts) {
+    return _runChildProcess(runId, command, args, {
+        ...opts,
+        onLogError: (err, id, msg) => logger.warn({ err, runId: id }, msg),
+    });
+}
+//# sourceMappingURL=utils.js.map

package/dist/adapters/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/adapters/utils.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,KAAK,WAAW,MAAM,2CAA2C,CAAC;AAUzE,MAAM,CAAC,MAAM,gBAAgB,GAC3B,WAAW,CAAC,gBAAgB,CAAC;AAC/B,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC,iBAAiB,CAAC;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC,iBAAiB,CAAC;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;AACnD,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;AAC7C,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;AAC7C,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;AACvD,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC,iBAAiB,CAAC;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC;AAC7D,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,CAAC;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAC,sBAAsB,CAAC;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,WAAW,CAAC,eAAe,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC,uBAAuB,CAAC;AAC3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAC,uBAAuB,CAAC;AAC3E,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC,qBAAqB,CAAC;AAEvE,MAAM,UAAU,yBAAyB,CACvC,GAA2B,EAC3B,UAA4C,EAAE;IAE9C,MAAM,8BAA8B,GAClC,WAMD,CAAC,yBAAyB,CAAC;IAE5B,IAAI,OAAO,8BAA8B,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO,8BAA8B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAA2B,EAAE,GAAG,GAAG,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAE5C,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACnD,IAAI,GAAG,IAAI,MAAM;YAAE,SAAS;QAC5B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,2BAA2B,CAAC;YAClE,WAAW,CAAC,wBAAwB,CAAC,eAAe,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAID,MAAM,gBAAgB,GAAG,WAAW,CAAC,eAAe,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,OAAe,EACf,IAAc,EACd,IAMC;IAED,OAAO,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QAC5C,GAAG,IAAI;QACP,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC;KACnE,CAAC,CAAC;AACL,CAAC"}

package/dist/agent-auth-jwt.d.ts

@@ -0,0 +1,14 @@
+export interface LocalAgentJwtClaims {
+    sub: string;
+    company_id: string;
+    adapter_type: string;
+    run_id: string;
+    iat: number;
+    exp: number;
+    iss?: string;
+    aud?: string;
+    jti?: string;
+}
+export declare function createLocalAgentJwt(agentId: string, companyId: string, adapterType: string, runId: string): string | null;
+export declare function verifyLocalAgentJwt(token: string): LocalAgentJwtClaims | null;
+//# sourceMappingURL=agent-auth-jwt.d.ts.map

package/dist/agent-auth-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-auth-jwt.d.ts","sourceRoot":"","sources":["../src/agent-auth-jwt.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAkDD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,iBAyBzG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CA8C7E"}

package/dist/agent-auth-jwt.js

@@ -0,0 +1,117 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+const JWT_ALGORITHM = "HS256";
+function parseNumber(value, fallback) {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed) || parsed <= 0)
+        return fallback;
+    return Math.floor(parsed);
+}
+function jwtConfig() {
+    const secret = process.env.EVERMORE_AGENT_JWT_SECRET?.trim() || process.env.BETTER_AUTH_SECRET?.trim();
+    if (!secret)
+        return null;
+    return {
+        secret,
+        ttlSeconds: parseNumber(process.env.EVERMORE_AGENT_JWT_TTL_SECONDS, 60 * 60 * 48),
+        issuer: process.env.EVERMORE_AGENT_JWT_ISSUER ?? "evermore",
+        audience: process.env.EVERMORE_AGENT_JWT_AUDIENCE ?? "evermore-api",
+    };
+}
+function base64UrlEncode(value) {
+    return Buffer.from(value, "utf8").toString("base64url");
+}
+function base64UrlDecode(value) {
+    return Buffer.from(value, "base64url").toString("utf8");
+}
+function signPayload(secret, signingInput) {
+    return createHmac("sha256", secret).update(signingInput).digest("base64url");
+}
+function parseJson(value) {
+    try {
+        const parsed = JSON.parse(value);
+        return parsed && typeof parsed === "object" ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function safeCompare(a, b) {
+    const left = Buffer.from(a);
+    const right = Buffer.from(b);
+    if (left.length !== right.length)
+        return false;
+    return timingSafeEqual(left, right);
+}
+export function createLocalAgentJwt(agentId, companyId, adapterType, runId) {
+    const config = jwtConfig();
+    if (!config)
+        return null;
+    const now = Math.floor(Date.now() / 1000);
+    const claims = {
+        sub: agentId,
+        company_id: companyId,
+        adapter_type: adapterType,
+        run_id: runId,
+        iat: now,
+        exp: now + config.ttlSeconds,
+        iss: config.issuer,
+        aud: config.audience,
+    };
+    const header = {
+        alg: JWT_ALGORITHM,
+        typ: "JWT",
+    };
+    const signingInput = `${base64UrlEncode(JSON.stringify(header))}.${base64UrlEncode(JSON.stringify(claims))}`;
+    const signature = signPayload(config.secret, signingInput);
+    return `${signingInput}.${signature}`;
+}
+export function verifyLocalAgentJwt(token) {
+    if (!token)
+        return null;
+    const config = jwtConfig();
+    if (!config)
+        return null;
+    const parts = token.split(".");
+    if (parts.length !== 3)
+        return null;
+    const [headerB64, claimsB64, signature] = parts;
+    const header = parseJson(base64UrlDecode(headerB64));
+    if (!header || header.alg !== JWT_ALGORITHM)
+        return null;
+    const signingInput = `${headerB64}.${claimsB64}`;
+    const expectedSig = signPayload(config.secret, signingInput);
+    if (!safeCompare(signature, expectedSig))
+        return null;
+    const claims = parseJson(base64UrlDecode(claimsB64));
+    if (!claims)
+        return null;
+    const sub = typeof claims.sub === "string" ? claims.sub : null;
+    const companyId = typeof claims.company_id === "string" ? claims.company_id : null;
+    const adapterType = typeof claims.adapter_type === "string" ? claims.adapter_type : null;
+    const runId = typeof claims.run_id === "string" ? claims.run_id : null;
+    const iat = typeof claims.iat === "number" ? claims.iat : null;
+    const exp = typeof claims.exp === "number" ? claims.exp : null;
+    if (!sub || !companyId || !adapterType || !runId || !iat || !exp)
+        return null;
+    const now = Math.floor(Date.now() / 1000);
+    if (exp < now)
+        return null;
+    const issuer = typeof claims.iss === "string" ? claims.iss : undefined;
+    const audience = typeof claims.aud === "string" ? claims.aud : undefined;
+    if (issuer && issuer !== config.issuer)
+        return null;
+    if (audience && audience !== config.audience)
+        return null;
+    return {
+        sub,
+        company_id: companyId,
+        adapter_type: adapterType,
+        run_id: runId,
+        iat,
+        exp,
+        ...(issuer ? { iss: issuer } : {}),
+        ...(audience ? { aud: audience } : {}),
+        jti: typeof claims.jti === "string" ? claims.jti : undefined,
+    };
+}
+//# sourceMappingURL=agent-auth-jwt.js.map

package/dist/agent-auth-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-auth-jwt.js","sourceRoot":"","sources":["../src/agent-auth-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAmB1D,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,SAAS,WAAW,CAAC,KAAyB,EAAE,QAAgB;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACvG,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,OAAO;QACL,MAAM;QACN,UAAU,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QACjF,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,UAAU;QAC3D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,cAAc;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,YAAoB;IACvD,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,SAAiB,EAAE,WAAmB,EAAE,KAAa;IACxG,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAwB;QAClC,GAAG,EAAE,OAAO;QACZ,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,UAAU;QAC5B,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,MAAM,CAAC,QAAQ;KACrB,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,aAAa;QAClB,GAAG,EAAE,KAAK;KACX,CAAC;IAEF,MAAM,YAAY,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IAC7G,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAE3D,OAAO,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IAEhD,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,SAAS,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAE9E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,GAAG,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,QAAQ,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE1D,OAAO;QACL,GAAG;QACH,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,WAAW;QACzB,MAAM,EAAE,KAAK;QACb,GAAG;QACH,GAAG;QACH,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,EAAE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;KAC7D,CAAC;AACJ,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,43 @@
+import express, { type Request as ExpressRequest } from "express";
+import type { Db } from "@evermore.work/db";
+import type { DeploymentExposure, DeploymentMode } from "@evermore.work/shared";
+import type { StorageService } from "./storage/types.js";
+import { type InstanceDatabaseBackupService } from "./routes/instance-database-backups.js";
+import { type PluginWorkerManager } from "./services/plugin-worker-manager.js";
+import type { BetterAuthSessionResult } from "./auth/better-auth.js";
+type UiMode = "none" | "static" | "vite-dev";
+export declare function resolveViteHmrPort(serverPort: number): number;
+export declare function shouldServeViteDevHtml(req: ExpressRequest): boolean;
+export declare function shouldEnablePrivateHostnameGuard(opts: {
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+}): boolean;
+export declare function createApp(db: Db, opts: {
+    uiMode: UiMode;
+    serverPort: number;
+    storageService: StorageService;
+    feedbackExportService?: {
+        flushPendingFeedbackTraces(input?: {
+            companyId?: string;
+            traceId?: string;
+            limit?: number;
+            now?: Date;
+        }): Promise<unknown>;
+    };
+    databaseBackupService?: InstanceDatabaseBackupService;
+    deploymentMode: DeploymentMode;
+    deploymentExposure: DeploymentExposure;
+    allowedHostnames: string[];
+    bindHost: string;
+    authReady: boolean;
+    companyDeletionEnabled: boolean;
+    instanceId?: string;
+    hostVersion?: string;
+    localPluginDir?: string;
+    pluginMigrationDb?: Db;
+    pluginWorkerManager?: PluginWorkerManager;
+    betterAuthHandler?: express.RequestHandler;
+    resolveSession?: (req: ExpressRequest) => Promise<BetterAuthSessionResult | null>;
+}): Promise<import("express-serve-static-core").Express>;
+export {};
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAU,KAAK,OAAO,IAAI,cAAc,EAAE,MAAM,SAAS,CAAC;AAI1E,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AA0BzD,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,uCAAuC,CAAC;AAW/C,OAAO,EAA6B,KAAK,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAa1G,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAGrE,KAAK,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAqB7C,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAKnE;AAED,wBAAgB,gCAAgC,CAAC,IAAI,EAAE;IACrD,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;CACxC,GAAG,OAAO,CAKV;AAED,wBAAsB,SAAS,CAC7B,EAAE,EAAE,EAAE,EACN,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,cAAc,CAAC;IAC/B,qBAAqB,CAAC,EAAE;QACtB,0BAA0B,CAAC,KAAK,CAAC,EAAE;YACjC,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,OAAO,CAAC,EAAE,MAAM,CAAC;YACjB,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,GAAG,CAAC,EAAE,IAAI,CAAC;SACZ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACtB,CAAC;IACF,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;IACtD,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,sBAAsB,EAAE,OAAO,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,EAAE,CAAC;IACvB,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,iBAAiB,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC;IAC3C,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;CACnF,wDA2TF"}

package/dist/app.js

@@ -0,0 +1,373 @@
+import express, { Router } from "express";
+import path from "node:path";
+import fs from "node:fs";
+import { fileURLToPath } from "node:url";
+import { httpLogger, errorHandler } from "./middleware/index.js";
+import { actorMiddleware } from "./middleware/auth.js";
+import { boardMutationGuard } from "./middleware/board-mutation-guard.js";
+import { privateHostnameGuard, resolvePrivateHostnameAllowSet } from "./middleware/private-hostname-guard.js";
+import { healthRoutes } from "./routes/health.js";
+import { companyRoutes } from "./routes/companies.js";
+import { companySkillRoutes } from "./routes/company-skills.js";
+import { agentRoutes } from "./routes/agents.js";
+import { projectRoutes } from "./routes/projects.js";
+import { issueRoutes } from "./routes/issues.js";
+import { issueTreeControlRoutes } from "./routes/issue-tree-control.js";
+import { routineRoutes } from "./routes/routines.js";
+import { environmentRoutes } from "./routes/environments.js";
+import { executionWorkspaceRoutes } from "./routes/execution-workspaces.js";
+import { goalRoutes } from "./routes/goals.js";
+import { approvalRoutes } from "./routes/approvals.js";
+import { secretRoutes } from "./routes/secrets.js";
+import { costRoutes } from "./routes/costs.js";
+import { activityRoutes } from "./routes/activity.js";
+import { dashboardRoutes } from "./routes/dashboard.js";
+import { userProfileRoutes } from "./routes/user-profiles.js";
+import { sidebarBadgeRoutes } from "./routes/sidebar-badges.js";
+import { sidebarPreferenceRoutes } from "./routes/sidebar-preferences.js";
+import { inboxDismissalRoutes } from "./routes/inbox-dismissals.js";
+import { instanceSettingsRoutes } from "./routes/instance-settings.js";
+import { instanceDatabaseBackupRoutes, } from "./routes/instance-database-backups.js";
+import { llmRoutes } from "./routes/llms.js";
+import { authRoutes } from "./routes/auth.js";
+import { assetRoutes } from "./routes/assets.js";
+import { accessRoutes } from "./routes/access.js";
+import { pluginRoutes } from "./routes/plugins.js";
+import { adapterRoutes } from "./routes/adapters.js";
+import { pluginUiStaticRoutes } from "./routes/plugin-ui-static.js";
+import { applyUiBranding } from "./ui-branding.js";
+import { logger } from "./middleware/logger.js";
+import { DEFAULT_LOCAL_PLUGIN_DIR, pluginLoader } from "./services/plugin-loader.js";
+import { createPluginWorkerManager } from "./services/plugin-worker-manager.js";
+import { createPluginJobScheduler } from "./services/plugin-job-scheduler.js";
+import { pluginJobStore } from "./services/plugin-job-store.js";
+import { createPluginToolDispatcher } from "./services/plugin-tool-dispatcher.js";
+import { pluginLifecycleManager } from "./services/plugin-lifecycle.js";
+import { createPluginJobCoordinator } from "./services/plugin-job-coordinator.js";
+import { buildHostServices, flushPluginLogBuffer } from "./services/plugin-host-services.js";
+import { createPluginEventBus } from "./services/plugin-event-bus.js";
+import { setPluginEventBus } from "./services/activity-log.js";
+import { createPluginDevWatcher } from "./services/plugin-dev-watcher.js";
+import { createPluginHostServiceCleanup } from "./services/plugin-host-service-cleanup.js";
+import { pluginRegistryService } from "./services/plugin-registry.js";
+import { createHostClientHandlers } from "@evermore.work/plugin-sdk";
+import { createCachedViteHtmlRenderer } from "./vite-html-renderer.js";
+const FEEDBACK_EXPORT_FLUSH_INTERVAL_MS = 5_000;
+const VITE_DEV_ASSET_PREFIXES = [
+    "/@fs/",
+    "/@id/",
+    "/@react-refresh",
+    "/@vite/",
+    "/assets/",
+    "/node_modules/",
+    "/src/",
+];
+const VITE_DEV_STATIC_PATHS = new Set([
+    "/apple-touch-icon.png",
+    "/favicon-16x16.png",
+    "/favicon-32x32.png",
+    "/favicon.ico",
+    "/favicon.svg",
+    "/site.webmanifest",
+    "/sw.js",
+]);
+export function resolveViteHmrPort(serverPort) {
+    if (serverPort <= 55_535) {
+        return serverPort + 10_000;
+    }
+    return Math.max(1_024, serverPort - 10_000);
+}
+export function shouldServeViteDevHtml(req) {
+    const pathname = req.path;
+    if (VITE_DEV_STATIC_PATHS.has(pathname))
+        return false;
+    if (VITE_DEV_ASSET_PREFIXES.some((prefix) => pathname.startsWith(prefix)))
+        return false;
+    return req.accepts(["html"]) === "html";
+}
+export function shouldEnablePrivateHostnameGuard(opts) {
+    return (opts.deploymentExposure === "private" &&
+        (opts.deploymentMode === "local_trusted" || opts.deploymentMode === "authenticated"));
+}
+export async function createApp(db, opts) {
+    const app = express();
+    app.use(express.json({
+        // Company import/export payloads can inline full portable packages.
+        limit: "10mb",
+        verify: (req, _res, buf) => {
+            req.rawBody = buf;
+        },
+    }));
+    app.use(httpLogger);
+    const privateHostnameGateEnabled = shouldEnablePrivateHostnameGuard({
+        deploymentMode: opts.deploymentMode,
+        deploymentExposure: opts.deploymentExposure,
+    });
+    const privateHostnameAllowSet = resolvePrivateHostnameAllowSet({
+        allowedHostnames: opts.allowedHostnames,
+        bindHost: opts.bindHost,
+    });
+    app.use(privateHostnameGuard({
+        enabled: privateHostnameGateEnabled,
+        allowedHostnames: opts.allowedHostnames,
+        bindHost: opts.bindHost,
+    }));
+    app.use(actorMiddleware(db, {
+        deploymentMode: opts.deploymentMode,
+        resolveSession: opts.resolveSession,
+    }));
+    app.use("/api/auth", authRoutes(db));
+    if (opts.betterAuthHandler) {
+        app.all("/api/auth/{*authPath}", opts.betterAuthHandler);
+    }
+    app.use(llmRoutes(db));
+    const hostServicesDisposers = new Map();
+    const workerManager = opts.pluginWorkerManager ?? createPluginWorkerManager();
+    // Mount API routes
+    const api = Router();
+    api.use(boardMutationGuard());
+    api.use("/health", healthRoutes(db, {
+        deploymentMode: opts.deploymentMode,
+        deploymentExposure: opts.deploymentExposure,
+        authReady: opts.authReady,
+        companyDeletionEnabled: opts.companyDeletionEnabled,
+    }));
+    api.use("/companies", companyRoutes(db, opts.storageService));
+    api.use(companySkillRoutes(db));
+    api.use(agentRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(assetRoutes(db, opts.storageService));
+    api.use(projectRoutes(db));
+    api.use(issueRoutes(db, opts.storageService, {
+        feedbackExportService: opts.feedbackExportService,
+        pluginWorkerManager: workerManager,
+    }));
+    api.use(issueTreeControlRoutes(db));
+    api.use(routineRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(environmentRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(executionWorkspaceRoutes(db));
+    api.use(goalRoutes(db));
+    api.use(approvalRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(secretRoutes(db));
+    api.use(costRoutes(db, { pluginWorkerManager: workerManager }));
+    api.use(activityRoutes(db));
+    api.use(dashboardRoutes(db));
+    api.use(userProfileRoutes(db));
+    api.use(sidebarBadgeRoutes(db));
+    api.use(sidebarPreferenceRoutes(db));
+    api.use(inboxDismissalRoutes(db));
+    api.use(instanceSettingsRoutes(db));
+    if (opts.databaseBackupService) {
+        api.use(instanceDatabaseBackupRoutes(opts.databaseBackupService));
+    }
+    const pluginRegistry = pluginRegistryService(db);
+    const eventBus = createPluginEventBus();
+    setPluginEventBus(eventBus);
+    const jobStore = pluginJobStore(db);
+    const lifecycle = pluginLifecycleManager(db, { workerManager });
+    const scheduler = createPluginJobScheduler({
+        db,
+        jobStore,
+        workerManager,
+    });
+    const toolDispatcher = createPluginToolDispatcher({
+        workerManager,
+        lifecycleManager: lifecycle,
+        db,
+    });
+    const jobCoordinator = createPluginJobCoordinator({
+        db,
+        lifecycle,
+        scheduler,
+        jobStore,
+    });
+    const hostServiceCleanup = createPluginHostServiceCleanup(lifecycle, hostServicesDisposers);
+    let viteHtmlRenderer = null;
+    const loader = pluginLoader(db, {
+        localPluginDir: opts.localPluginDir ?? DEFAULT_LOCAL_PLUGIN_DIR,
+        migrationDb: opts.pluginMigrationDb,
+    }, {
+        workerManager,
+        eventBus,
+        jobScheduler: scheduler,
+        jobStore,
+        toolDispatcher,
+        lifecycleManager: lifecycle,
+        instanceInfo: {
+            instanceId: opts.instanceId ?? "default",
+            hostVersion: opts.hostVersion ?? "0.0.0",
+            deploymentMode: opts.deploymentMode,
+            deploymentExposure: opts.deploymentExposure,
+        },
+        buildHostHandlers: (pluginId, manifest) => {
+            const notifyWorker = (method, params) => {
+                const handle = workerManager.getWorker(pluginId);
+                if (handle)
+                    handle.notify(method, params);
+            };
+            const services = buildHostServices(db, pluginId, manifest.id, eventBus, notifyWorker, {
+                pluginWorkerManager: workerManager,
+                manifest,
+            });
+            hostServicesDisposers.set(pluginId, () => services.dispose());
+            return createHostClientHandlers({
+                pluginId,
+                capabilities: manifest.capabilities,
+                services,
+            });
+        },
+    });
+    api.use(pluginRoutes(db, loader, { scheduler, jobStore }, { workerManager }, { toolDispatcher }, { workerManager }));
+    api.use(adapterRoutes());
+    api.use(accessRoutes(db, {
+        deploymentMode: opts.deploymentMode,
+        deploymentExposure: opts.deploymentExposure,
+        bindHost: opts.bindHost,
+        allowedHostnames: opts.allowedHostnames,
+    }));
+    app.use("/api", api);
+    app.use("/api", (_req, res) => {
+        res.status(404).json({ error: "API route not found" });
+    });
+    app.use(pluginUiStaticRoutes(db, {
+        localPluginDir: opts.localPluginDir ?? DEFAULT_LOCAL_PLUGIN_DIR,
+    }));
+    const __dirname = path.dirname(fileURLToPath(import.meta.url));
+    if (opts.uiMode === "static") {
+        // Try published location first (server/ui-dist/), then monorepo dev location (../../ui/dist)
+        const candidates = [
+            path.resolve(__dirname, "../ui-dist"),
+            path.resolve(__dirname, "../../ui/dist"),
+        ];
+        const uiDist = candidates.find((p) => fs.existsSync(path.join(p, "index.html")));
+        if (uiDist) {
+            const indexHtml = applyUiBranding(fs.readFileSync(path.join(uiDist, "index.html"), "utf-8"));
+            // Hashed asset files (Vite emits them under /assets/<name>.<hash>.<ext>)
+            // never change once built, so they can be cached aggressively.
+            app.use("/assets", express.static(path.join(uiDist, "assets"), {
+                maxAge: "1y",
+                immutable: true,
+            }));
+            // Non-hashed static files (favicon.ico, manifest, robots.txt, etc.):
+            // short cache so operators who swap them out see the new version
+            // reasonably fast. Override for `index.html` specifically — it is
+            // served by this middleware for `/` and `/index.html`, and it must
+            // never outlive the asset hashes it points at.
+            app.use(express.static(uiDist, {
+                maxAge: "1h",
+                setHeaders(res, filePath) {
+                    if (path.basename(filePath) === "index.html") {
+                        res.set("Cache-Control", "no-cache");
+                    }
+                },
+            }));
+            // SPA fallback. Only for non-asset routes — if the browser asks for
+            // /assets/something.js that doesn't exist, we must NOT serve the HTML
+            // shell: the browser would try to load it as a JavaScript module, fail
+            // with a MIME-type error, and cache that broken response. Return 404
+            // instead. The index.html response itself is no-cache so a subsequent
+            // deploy's updated asset hashes are picked up on next load.
+            app.get(/.*/, (req, res) => {
+                if (req.path.startsWith("/assets/")) {
+                    res.status(404).end();
+                    return;
+                }
+                res
+                    .status(200)
+                    .set("Content-Type", "text/html")
+                    .set("Cache-Control", "no-cache")
+                    .end(indexHtml);
+            });
+        }
+        else {
+            console.warn("[evermore] UI dist not found; running in API-only mode");
+        }
+    }
+    if (opts.uiMode === "vite-dev") {
+        const uiRoot = path.resolve(__dirname, "../../ui");
+        const publicUiRoot = path.resolve(uiRoot, "public");
+        const hmrPort = resolveViteHmrPort(opts.serverPort);
+        const { createServer: createViteServer } = await import("vite");
+        const vite = await createViteServer({
+            root: uiRoot,
+            appType: "custom",
+            server: {
+                middlewareMode: true,
+                hmr: {
+                    host: opts.bindHost,
+                    port: hmrPort,
+                    clientPort: hmrPort,
+                },
+                allowedHosts: privateHostnameGateEnabled ? Array.from(privateHostnameAllowSet) : undefined,
+            },
+        });
+        viteHtmlRenderer = createCachedViteHtmlRenderer({
+            vite,
+            uiRoot,
+            brandHtml: applyUiBranding,
+        });
+        const renderViteHtml = viteHtmlRenderer;
+        if (fs.existsSync(publicUiRoot)) {
+            app.use(express.static(publicUiRoot, { index: false }));
+        }
+        app.get(/.*/, async (req, res, next) => {
+            if (!shouldServeViteDevHtml(req)) {
+                next();
+                return;
+            }
+            try {
+                const html = await renderViteHtml.render(req.originalUrl);
+                res.status(200).set({ "Content-Type": "text/html" }).end(html);
+            }
+            catch (err) {
+                next(err);
+            }
+        });
+        app.use(vite.middlewares);
+    }
+    app.use(errorHandler);
+    jobCoordinator.start();
+    scheduler.start();
+    const feedbackExportTimer = opts.feedbackExportService
+        ? setInterval(() => {
+            void opts.feedbackExportService?.flushPendingFeedbackTraces().catch((err) => {
+                logger.error({ err }, "Failed to flush pending feedback exports");
+            });
+        }, FEEDBACK_EXPORT_FLUSH_INTERVAL_MS)
+        : null;
+    feedbackExportTimer?.unref?.();
+    if (opts.feedbackExportService) {
+        void opts.feedbackExportService.flushPendingFeedbackTraces().catch((err) => {
+            logger.error({ err }, "Failed to flush pending feedback exports");
+        });
+    }
+    void toolDispatcher.initialize().catch((err) => {
+        logger.error({ err }, "Failed to initialize plugin tool dispatcher");
+    });
+    const devWatcher = opts.uiMode === "vite-dev"
+        ? createPluginDevWatcher(lifecycle, async (pluginId) => (await pluginRegistry.getById(pluginId))?.packagePath ?? null)
+        : null;
+    void loader.loadAll().then((result) => {
+        if (!result)
+            return;
+        for (const loaded of result.results) {
+            if (devWatcher && loaded.success && loaded.plugin.packagePath) {
+                devWatcher.watch(loaded.plugin.id, loaded.plugin.packagePath);
+            }
+        }
+    }).catch((err) => {
+        logger.error({ err }, "Failed to load ready plugins on startup");
+    });
+    process.once("exit", () => {
+        if (feedbackExportTimer)
+            clearInterval(feedbackExportTimer);
+        devWatcher?.close();
+        viteHtmlRenderer?.dispose();
+        hostServiceCleanup.disposeAll();
+        hostServiceCleanup.teardown();
+    });
+    process.once("beforeExit", () => {
+        void flushPluginLogBuffer();
+    });
+    return app;
+}
+//# sourceMappingURL=app.js.map