@inspectr/mcplab 0.1.0

package/dist/app-server/scenario-assistant.js

@@ -0,0 +1,246 @@
+import { existsSync } from 'node:fs';
+import { isAbsolute, join } from 'node:path';
+import { McpClientManager, loadConfig } from '@inspectr/mcplab-core';
+export async function handleScenarioAssistantRoutes(params) {
+    const { req, res, pathname, method, settings, assistantSessions, deps } = params;
+    const { parseBody, asJson, cleanupAssistantSessions, touchAssistantSession, assistantSessionView, ensureInsideRoot, readLibraries, pickDefaultAssistantAgentName, resolveAssistantAgentFromConfig, resolveAssistantAgentFromLibraries, preloadAssistantTools, continueAssistantTurn, executeAssistantToolCall, summarizeToolResultForAssistant } = deps;
+    const errorMessage = (error) => (error instanceof Error ? error.message : String(error));
+    if (pathname === '/api/scenario-assistant/sessions' && method === 'POST') {
+        cleanupAssistantSessions(assistantSessions);
+        const body = (await parseBody(req));
+        const configPathRaw = body.configPath ? String(body.configPath).trim() : '';
+        const scenarioId = String(body.scenarioId ?? '').trim();
+        const requestedAssistantAgentName = String(body.selectedAssistantAgentName ?? '').trim();
+        const contextRaw = body.context ?? {};
+        if (!scenarioId) {
+            asJson(res, 400, { error: 'scenarioId is required' });
+            return true;
+        }
+        if (!contextRaw ||
+            typeof contextRaw !== 'object' ||
+            !('scenario' in contextRaw) ||
+            !contextRaw.scenario ||
+            typeof contextRaw.scenario !== 'object') {
+            asJson(res, 400, { error: 'context.scenario is required' });
+            return true;
+        }
+        const context = contextRaw;
+        let configPath;
+        let agentConfig;
+        let serversByName;
+        let warnings = [];
+        let selectedAssistantAgentName = '';
+        if (configPathRaw) {
+            configPath = isAbsolute(configPathRaw)
+                ? ensureInsideRoot(settings.evalsDir, configPathRaw)
+                : ensureInsideRoot(settings.evalsDir, join(settings.evalsDir, configPathRaw));
+            if (!existsSync(configPath)) {
+                asJson(res, 404, { error: `Config not found: ${configPath}` });
+                return true;
+            }
+            const loaded = loadConfig(configPath, { bundleRoot: settings.librariesDir });
+            warnings = [...(loaded.warnings ?? [])];
+            selectedAssistantAgentName = pickDefaultAssistantAgentName({
+                requested: requestedAssistantAgentName,
+                agentNames: Object.keys(loaded.config.agents)
+            });
+            if (!selectedAssistantAgentName) {
+                asJson(res, 400, {
+                    error: 'No agents available for Scenario Assistant in this MCP Evaluation.'
+                });
+                return true;
+            }
+            agentConfig = resolveAssistantAgentFromConfig(loaded.config, selectedAssistantAgentName);
+            serversByName = loaded.config.servers;
+        }
+        else {
+            const libraries = readLibraries(settings.librariesDir);
+            selectedAssistantAgentName = pickDefaultAssistantAgentName({
+                requested: requestedAssistantAgentName,
+                settingsDefault: settings.scenarioAssistantAgentName,
+                agentNames: Object.keys(libraries.agents)
+            });
+            if (!selectedAssistantAgentName) {
+                asJson(res, 400, {
+                    error: 'No library agents available for Scenario Assistant. Add an agent first.'
+                });
+                return true;
+            }
+            agentConfig = resolveAssistantAgentFromLibraries(libraries, selectedAssistantAgentName);
+            serversByName = libraries.servers;
+        }
+        const session = {
+            id: `sas-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+            createdAt: Date.now(),
+            lastTouchedAt: Date.now(),
+            configPath,
+            selectedAssistantAgentName,
+            context,
+            agentConfig,
+            mcp: new McpClientManager(),
+            tools: [],
+            toolPublicMap: new Map(),
+            pendingToolCalls: [],
+            chatMessages: [],
+            llmMessages: [],
+            warnings
+        };
+        session.chatMessages.push({
+            id: `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+            role: 'system',
+            text: 'Scenario Assistant session created.',
+            createdAt: new Date().toISOString()
+        });
+        const selectedServerNames = Array.from(new Set(Array.isArray(context.scenario.serverNames)
+            ? context.scenario.serverNames.map((v) => String(v))
+            : []));
+        await preloadAssistantTools(session, serversByName, selectedServerNames);
+        assistantSessions.set(session.id, session);
+        asJson(res, 201, { sessionId: session.id, session: assistantSessionView(session) });
+        return true;
+    }
+    if (pathname.startsWith('/api/scenario-assistant/sessions/') && method === 'GET') {
+        cleanupAssistantSessions(assistantSessions);
+        const sessionId = pathname.replace('/api/scenario-assistant/sessions/', '');
+        const session = assistantSessions.get(sessionId);
+        if (!session) {
+            asJson(res, 404, { error: 'Scenario Assistant session not found' });
+            return true;
+        }
+        touchAssistantSession(session);
+        asJson(res, 200, { session: assistantSessionView(session) });
+        return true;
+    }
+    if (pathname.startsWith('/api/scenario-assistant/sessions/') && method === 'DELETE') {
+        cleanupAssistantSessions(assistantSessions);
+        const sessionId = pathname.replace('/api/scenario-assistant/sessions/', '');
+        assistantSessions.delete(sessionId);
+        asJson(res, 200, { ok: true });
+        return true;
+    }
+    if (pathname.startsWith('/api/scenario-assistant/sessions/') &&
+        pathname.endsWith('/messages') &&
+        method === 'POST') {
+        cleanupAssistantSessions(assistantSessions);
+        const parts = pathname.split('/');
+        const sessionId = parts[4];
+        const session = assistantSessions.get(sessionId);
+        if (!session) {
+            asJson(res, 404, { error: 'Scenario Assistant session not found' });
+            return true;
+        }
+        const body = await parseBody(req);
+        const message = String(body.message ?? '').trim();
+        if (!message) {
+            asJson(res, 400, { error: 'message is required' });
+            return true;
+        }
+        session.chatMessages.push({
+            id: `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+            role: 'user',
+            text: message,
+            createdAt: new Date().toISOString()
+        });
+        session.llmMessages.push({ role: 'user', content: message });
+        const output = await continueAssistantTurn(session);
+        asJson(res, 200, output);
+        return true;
+    }
+    if (pathname.startsWith('/api/scenario-assistant/sessions/') &&
+        pathname.includes('/tool-calls/') &&
+        pathname.endsWith('/approve') &&
+        method === 'POST') {
+        cleanupAssistantSessions(assistantSessions);
+        const parts = pathname.split('/');
+        const sessionId = parts[4];
+        const callId = parts[6];
+        const session = assistantSessions.get(sessionId);
+        if (!session) {
+            asJson(res, 404, { error: 'Scenario Assistant session not found' });
+            return true;
+        }
+        const pending = session.pendingToolCalls.find((call) => call.id === callId);
+        if (!pending) {
+            asJson(res, 404, { error: 'Scenario Assistant tool call not found' });
+            return true;
+        }
+        if (pending.status !== 'pending') {
+            asJson(res, 409, { error: `Tool call is already ${pending.status}` });
+            return true;
+        }
+        const body = (await parseBody(req));
+        if (Object.prototype.hasOwnProperty.call(body ?? {}, 'argumentsOverride')) {
+            pending.arguments = body.argumentsOverride;
+        }
+        pending.status = 'approved';
+        try {
+            const toolResult = await executeAssistantToolCall(session, pending);
+            pending.resultPreview = summarizeToolResultForAssistant(toolResult);
+            session.llmMessages.push({
+                role: 'tool',
+                content: pending.resultPreview,
+                tool_call_id: pending.id,
+                name: pending.publicToolName
+            });
+        }
+        catch (error) {
+            pending.status = 'error';
+            pending.error = errorMessage(error);
+            session.llmMessages.push({
+                role: 'tool',
+                content: JSON.stringify({ error: pending.error }),
+                tool_call_id: pending.id,
+                name: pending.publicToolName
+            });
+            session.chatMessages.push({
+                id: `msg-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                role: 'tool',
+                text: `Tool error (${pending.server}::${pending.tool}): ${pending.error}`,
+                createdAt: new Date().toISOString()
+            });
+        }
+        const output = await continueAssistantTurn(session);
+        asJson(res, 200, output);
+        return true;
+    }
+    if (pathname.startsWith('/api/scenario-assistant/sessions/') &&
+        pathname.includes('/tool-calls/') &&
+        pathname.endsWith('/deny') &&
+        method === 'POST') {
+        cleanupAssistantSessions(assistantSessions);
+        const parts = pathname.split('/');
+        const sessionId = parts[4];
+        const callId = parts[6];
+        const session = assistantSessions.get(sessionId);
+        if (!session) {
+            asJson(res, 404, { error: 'Scenario Assistant session not found' });
+            return true;
+        }
+        const pending = session.pendingToolCalls.find((call) => call.id === callId);
+        if (!pending) {
+            asJson(res, 404, { error: 'Scenario Assistant tool call not found' });
+            return true;
+        }
+        if (pending.status !== 'pending') {
+            asJson(res, 409, { error: `Tool call is already ${pending.status}` });
+            return true;
+        }
+        pending.status = 'denied';
+        session.llmMessages.push({
+            role: 'tool',
+            content: JSON.stringify({
+                denied: true,
+                reason: 'User denied tool call',
+                server: pending.server,
+                tool: pending.tool
+            }),
+            tool_call_id: pending.id,
+            name: pending.publicToolName
+        });
+        const output = await continueAssistantTurn(session);
+        asJson(res, 200, output);
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=scenario-assistant.js.map

package/dist/app-server/scenario-assistant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scenario-assistant.js","sourceRoot":"","sources":["../../src/app-server/scenario-assistant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,UAAU,EAGX,MAAM,uBAAuB,CAAC;AAsB/B,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,MAQnD;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACjF,MAAM,EACJ,SAAS,EACT,MAAM,EACN,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,6BAA6B,EAC7B,+BAA+B,EAC/B,kCAAkC,EAClC,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,+BAA+B,EAChC,GAAG,IAAI,CAAC;IAET,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAIlG,IAAI,QAAQ,KAAK,kCAAkC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACzE,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAKjC,CAAC;QACF,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,2BAA2B,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IACE,CAAC,UAAU;YACX,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC;YAC3B,CAAE,UAAqC,CAAC,QAAQ;YAChD,OAAQ,UAAqC,CAAC,QAAQ,KAAK,QAAQ,EACnE,CAAC;YACD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,UAA4B,CAAC;QAC7C,IAAI,UAA8B,CAAC;QACnC,IAAI,WAAwB,CAAC;QAC7B,IAAI,aAAoC,CAAC;QACzC,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,IAAI,0BAA0B,GAAG,EAAE,CAAC;QACpC,IAAI,aAAa,EAAE,CAAC;YAClB,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC;gBACpC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;gBACpD,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;YAC7E,QAAQ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;YACxC,0BAA0B,GAAG,6BAA6B,CAAC;gBACzD,SAAS,EAAE,2BAA2B;gBACtC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;aAC9C,CAAC,CAAC;YACH,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;oBACf,KAAK,EAAE,oEAAoE;iBAC5E,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,WAAW,GAAG,+BAA+B,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;YACzF,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACvD,0BAA0B,GAAG,6BAA6B,CAAC;gBACzD,SAAS,EAAE,2BAA2B;gBACtC,eAAe,EAAE,QAAQ,CAAC,0BAA0B;gBACpD,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC1C,CAAC,CAAC;YACH,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;oBACf,KAAK,EAAE,yEAAyE;iBACjF,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YACD,WAAW,GAAG,kCAAkC,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YACxF,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC;QACpC,CAAC;QACD,MAAM,OAAO,GAA6B;YACxC,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACjE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,UAAU;YACV,0BAA0B;YAC1B,OAAO;YACP,WAAW;YACX,GAAG,EAAE,IAAI,gBAAgB,EAAE;YAC3B,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,IAAI,GAAG,EAAE;YACxB,gBAAgB,EAAE,EAAE;YACpB,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,EAAE;YACf,QAAQ;SACT,CAAC;QACF,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACjE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,qCAAqC;YAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,MAAM,mBAAmB,GAAG,KAAK,CAAC,IAAI,CACpC,IAAI,GAAG,CACL,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YACzC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC,CAAC,EAAE,CACP,CACF,CAAC;QACF,MAAM,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;QACzE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,mCAAmC,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACjF,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,mCAAmC,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpF,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QAC5E,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,CAAC,UAAU,CAAC,mCAAmC,CAAC;QACxD,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC9B,MAAM,KAAK,MAAM,EACjB,CAAC;QACD,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACjE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QACH,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,CAAC,UAAU,CAAC,mCAAmC,CAAC;QACxD,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC7B,MAAM,KAAK,MAAM,EACjB,CAAC;QACD,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAoC,CAAC;QACvE,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,mBAAmB,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpE,OAAO,CAAC,aAAa,GAAG,+BAA+B,CAAC,UAAU,CAAC,CAAC;YACpE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;gBACvB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,OAAO,CAAC,aAAa;gBAC9B,YAAY,EAAE,OAAO,CAAC,EAAE;gBACxB,IAAI,EAAE,OAAO,CAAC,cAAc;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YACzB,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;gBACvB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBACjD,YAAY,EAAE,OAAO,CAAC,EAAE;gBACxB,IAAI,EAAE,OAAO,CAAC,cAAc;aAC7B,CAAC,CAAC;YACH,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;gBACxB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;gBACjE,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,eAAe,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,KAAK,EAAE;gBACzE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,CAAC,UAAU,CAAC,mCAAmC,CAAC;QACxD,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACjC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC1B,MAAM,KAAK,MAAM,EACjB,CAAC;QACD,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,wBAAwB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC1B,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,MAAM,EAAE,uBAAuB;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC;YACF,YAAY,EAAE,OAAO,CAAC,EAAE;YACxB,IAAI,EAAE,OAAO,CAAC,cAAc;SAC7B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/app-server/settings-store.d.ts

@@ -0,0 +1,4 @@
+import type { AppSettings } from './types.js';
+export declare function applySettingsOverrides(settings: AppSettings): void;
+export declare function persistSettingsOverrides(settings: AppSettings): void;
+//# sourceMappingURL=settings-store.d.ts.map

package/dist/app-server/settings-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.d.ts","sourceRoot":"","sources":["../../src/app-server/settings-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAqB9C,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAIlE;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAOpE"}

package/dist/app-server/settings-store.js

@@ -0,0 +1,32 @@
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { parse as parseYaml, stringify as stringifyYaml } from 'yaml';
+function settingsOverridesFilePath(settings) {
+    return join(settings.librariesDir, '.mcplab-app-settings.yaml');
+}
+function loadSettingsOverrides(settings) {
+    const filePath = settingsOverridesFilePath(settings);
+    if (!existsSync(filePath))
+        return {};
+    try {
+        const parsed = parseYaml(readFileSync(filePath, 'utf8'));
+        return parsed && typeof parsed === 'object' ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+export function applySettingsOverrides(settings) {
+    const overrides = loadSettingsOverrides(settings);
+    settings.scenarioAssistantAgentName =
+        overrides.scenario_assistant_agent_name?.trim() || undefined;
+}
+export function persistSettingsOverrides(settings) {
+    const payload = {
+        ...(settings.scenarioAssistantAgentName
+            ? { scenario_assistant_agent_name: settings.scenarioAssistantAgentName }
+            : {})
+    };
+    writeFileSync(settingsOverridesFilePath(settings), `${stringifyYaml(payload)}\n`, 'utf8');
+}
+//# sourceMappingURL=settings-store.js.map

package/dist/app-server/settings-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.js","sourceRoot":"","sources":["../../src/app-server/settings-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAOtE,SAAS,yBAAyB,CAAC,QAAqB;IACtD,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAqB;IAClD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAqC,CAAC;QAC7F,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAqB;IAC1D,MAAM,SAAS,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAClD,QAAQ,CAAC,0BAA0B;QACjC,SAAS,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAqB;IAC5D,MAAM,OAAO,GAAyB;QACpC,GAAG,CAAC,QAAQ,CAAC,0BAA0B;YACrC,CAAC,CAAC,EAAE,6BAA6B,EAAE,QAAQ,CAAC,0BAA0B,EAAE;YACxE,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,aAAa,CAAC,yBAAyB,CAAC,QAAQ,CAAC,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC5F,CAAC"}

package/dist/app-server/snapshots-routes.d.ts

@@ -0,0 +1,24 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { AppRouteDeps, AppRouteRequestContext } from './app-context.js';
+export type SnapshotsRouteDeps = Pick<
+  AppRouteDeps,
+  | 'parseBody'
+  | 'asJson'
+  | 'listSnapshots'
+  | 'buildSnapshotFromRun'
+  | 'saveSnapshot'
+  | 'loadSnapshot'
+  | 'compareRunToSnapshot'
+  | 'getRunResults'
+  | 'decodeEvalId'
+  | 'readConfigRecord'
+>;
+export declare function handleSnapshotsRoutes(params: {
+  req: IncomingMessage;
+  res: ServerResponse;
+  pathname: string;
+  method: string;
+  settings: AppRouteRequestContext['settings'];
+  deps: SnapshotsRouteDeps;
+}): Promise<boolean>;
+//# sourceMappingURL=snapshots-routes.d.ts.map

package/dist/app-server/snapshots-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshots-routes.d.ts","sourceRoot":"","sources":["../../src/app-server/snapshots-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,YAAY,EACV,WAAW,GACX,QAAQ,GACR,eAAe,GACf,sBAAsB,GACtB,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,eAAe,GACf,cAAc,GACd,kBAAkB,CACrB,CAAC;AAEF,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,GAAG,EAAE,eAAe,CAAC;IACrB,GAAG,EAAE,cAAc,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,EAAE,kBAAkB,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAiGnB"}

package/dist/app-server/snapshots-routes.js

@@ -0,0 +1,82 @@
+import { writeFileSync } from 'node:fs';
+import { stringify as stringifyYaml } from 'yaml';
+import { loadConfig } from '@inspectr/mcplab-core';
+export async function handleSnapshotsRoutes(params) {
+    const { req, res, pathname, method, settings, deps } = params;
+    const { parseBody, asJson, listSnapshots, buildSnapshotFromRun, saveSnapshot, loadSnapshot, compareRunToSnapshot, getRunResults, decodeEvalId, readConfigRecord } = deps;
+    if (pathname === '/api/snapshots' && method === 'GET') {
+        asJson(res, 200, listSnapshots(settings.snapshotsDir));
+        return true;
+    }
+    if (pathname === '/api/snapshots' && method === 'POST') {
+        const body = await parseBody(req);
+        const runId = String(body.runId ?? '').trim();
+        const name = body.name ? String(body.name) : undefined;
+        if (!runId) {
+            asJson(res, 400, { error: 'runId is required' });
+            return true;
+        }
+        const results = getRunResults(runId, settings.runsDir);
+        const snapshot = buildSnapshotFromRun(results, name);
+        saveSnapshot(snapshot, settings.snapshotsDir);
+        asJson(res, 201, snapshot);
+        return true;
+    }
+    if (pathname === '/api/snapshots/generate-eval' && method === 'POST') {
+        const body = await parseBody(req);
+        const runId = String(body.runId ?? '').trim();
+        const configId = String(body.configId ?? '').trim();
+        const name = body.name ? String(body.name) : undefined;
+        if (!runId) {
+            asJson(res, 400, { error: 'runId is required' });
+            return true;
+        }
+        if (!configId) {
+            asJson(res, 400, { error: 'configId is required' });
+            return true;
+        }
+        const results = getRunResults(runId, settings.runsDir);
+        const snapshot = buildSnapshotFromRun(results, name);
+        saveSnapshot(snapshot, settings.snapshotsDir);
+        const configPath = decodeEvalId(configId, settings.evalsDir);
+        const { sourceConfig } = loadConfig(configPath, { bundleRoot: settings.librariesDir });
+        const nextConfig = {
+            ...sourceConfig,
+            snapshot_eval: {
+                enabled: true,
+                mode: sourceConfig.snapshot_eval?.mode ?? 'warn',
+                baseline_snapshot_id: snapshot.id,
+                baseline_source_run_id: runId,
+                last_updated_at: new Date().toISOString()
+            }
+        };
+        writeFileSync(configPath, `${stringifyYaml(nextConfig)}\n`, 'utf8');
+        asJson(res, 201, {
+            snapshot,
+            config: readConfigRecord(configPath, settings.evalsDir, settings.librariesDir)
+        });
+        return true;
+    }
+    if (pathname.startsWith('/api/snapshots/') && method === 'GET') {
+        const snapshotId = pathname.replace('/api/snapshots/', '');
+        asJson(res, 200, loadSnapshot(snapshotId, settings.snapshotsDir));
+        return true;
+    }
+    if (pathname.startsWith('/api/snapshots/') &&
+        pathname.endsWith('/compare') &&
+        method === 'POST') {
+        const snapshotId = pathname.split('/')[3];
+        const body = await parseBody(req);
+        const runId = String(body.runId ?? '').trim();
+        if (!runId) {
+            asJson(res, 400, { error: 'runId is required' });
+            return true;
+        }
+        const snapshot = loadSnapshot(snapshotId, settings.snapshotsDir);
+        const run = getRunResults(runId, settings.runsDir);
+        asJson(res, 200, compareRunToSnapshot(run, snapshot));
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=snapshots-routes.js.map

package/dist/app-server/snapshots-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshots-routes.js","sourceRoot":"","sources":["../../src/app-server/snapshots-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAClD,OAAO,EAAE,UAAU,EAAyB,MAAM,uBAAuB,CAAC;AAiB1E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAO3C;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAC9D,MAAM,EACJ,SAAS,EACT,MAAM,EACN,aAAa,EACb,oBAAoB,EACpB,YAAY,EACZ,YAAY,EACZ,oBAAoB,EACpB,aAAa,EACb,YAAY,EACZ,gBAAgB,EACjB,GAAG,IAAI,CAAC;IAET,IAAI,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,gBAAgB,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,KAAK,8BAA8B,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,EAAE,YAAY,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QACvF,MAAM,UAAU,GAAqB;YACnC,GAAG,YAAY;YACf,aAAa,EAAE;gBACb,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,YAAY,CAAC,aAAa,EAAE,IAAI,IAAI,MAAM;gBAChD,oBAAoB,EAAE,QAAQ,CAAC,EAAE;gBACjC,sBAAsB,EAAE,KAAK;gBAC7B,eAAe,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAC1C;SACF,CAAC;QACF,aAAa,CAAC,UAAU,EAAE,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;YACf,QAAQ;YACR,MAAM,EAAE,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,YAAY,CAAC;SAC/E,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACtC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC7B,MAAM,KAAK,MAAM,EACjB,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/app-server/static-serving.d.ts

@@ -0,0 +1,17 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export declare function mapContentType(pathname: string): string;
+export declare function proxyToVite(
+  req: IncomingMessage,
+  res: ServerResponse,
+  target: string,
+  pathname: string,
+  search: string
+): Promise<void>;
+export declare function serveStatic(params: {
+  appDist: string;
+  pathname: string;
+  res: ServerResponse;
+  ensureInsideRoot: (rootDir: string, candidatePath: string) => string;
+  asText: (res: ServerResponse, code: number, body: string) => void;
+}): void;
+//# sourceMappingURL=static-serving.d.ts.map

package/dist/app-server/static-serving.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-serving.d.ts","sourceRoot":"","sources":["../../src/app-server/static-serving.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,iBAyBf;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,cAAc,CAAC;IACpB,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,MAAM,CAAC;IACrE,MAAM,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACnE,QAmBA"}

package/dist/app-server/static-serving.js

@@ -0,0 +1,64 @@
+import { createReadStream, existsSync, statSync } from 'node:fs';
+import { join } from 'node:path';
+export function mapContentType(pathname) {
+    if (pathname.endsWith('.html'))
+        return 'text/html; charset=utf-8';
+    if (pathname.endsWith('.js'))
+        return 'application/javascript; charset=utf-8';
+    if (pathname.endsWith('.css'))
+        return 'text/css; charset=utf-8';
+    if (pathname.endsWith('.json'))
+        return 'application/json; charset=utf-8';
+    if (pathname.endsWith('.svg'))
+        return 'image/svg+xml';
+    if (pathname.endsWith('.png'))
+        return 'image/png';
+    if (pathname.endsWith('.jpg') || pathname.endsWith('.jpeg'))
+        return 'image/jpeg';
+    if (pathname.endsWith('.woff2'))
+        return 'font/woff2';
+    return 'application/octet-stream';
+}
+export async function proxyToVite(req, res, target, pathname, search) {
+    const url = `${target}${pathname}${search}`;
+    const method = req.method ?? 'GET';
+    const headers = new Headers();
+    for (const [key, value] of Object.entries(req.headers)) {
+        if (!value)
+            continue;
+        if (Array.isArray(value)) {
+            headers.set(key, value.join(','));
+        }
+        else {
+            headers.set(key, value);
+        }
+    }
+    const body = method === 'GET' || method === 'HEAD' ? undefined : req;
+    const response = await fetch(url, { method, headers, body: body, duplex: 'half' });
+    res.statusCode = response.status;
+    response.headers.forEach((value, key) => res.setHeader(key, value));
+    if (!response.body) {
+        res.end();
+        return;
+    }
+    for await (const chunk of response.body) {
+        res.write(chunk);
+    }
+    res.end();
+}
+export function serveStatic(params) {
+    const { appDist, pathname, res, ensureInsideRoot, asText } = params;
+    const cleanPath = pathname === '/' ? '/index.html' : pathname;
+    const requested = ensureInsideRoot(appDist, join(appDist, cleanPath));
+    const filePath = existsSync(requested) && statSync(requested).isFile()
+        ? requested
+        : ensureInsideRoot(appDist, join(appDist, 'index.html'));
+    if (!existsSync(filePath)) {
+        asText(res, 500, `Missing app build at ${appDist}. Run "npm run build -w @inspectr/mcplab-app".`);
+        return;
+    }
+    res.statusCode = 200;
+    res.setHeader('content-type', mapContentType(filePath));
+    createReadStream(filePath).pipe(res);
+}
+//# sourceMappingURL=static-serving.js.map

package/dist/app-server/static-serving.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-serving.js","sourceRoot":"","sources":["../../src/app-server/static-serving.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAClE,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,uCAAuC,CAAC;IAC7E,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAChE,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,iCAAiC,CAAC;IACzE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,eAAe,CAAC;IACtD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAC;IACjF,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC;IACrD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,GAAmB,EACnB,MAAc,EACd,QAAgB,EAChB,MAAc;IAEd,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAW,EAAE,MAAM,EAAE,MAAM,EAAS,CAAC,CAAC;IACjG,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAW,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAM3B;IACC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACpE,MAAM,SAAS,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GACZ,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,MAAM,CACJ,GAAG,EACH,GAAG,EACH,wBAAwB,OAAO,gDAAgD,CAChF,CAAC;QACF,OAAO;IACT,CAAC;IACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;IACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC"}

package/dist/app-server/store-utils.d.ts

@@ -0,0 +1,5 @@
+export declare function ensureInsideRoot(rootDir: string, candidatePath: string): string;
+export declare function encodeEvalId(absPath: string, rootDir: string): string;
+export declare function decodeEvalId(id: string, rootDir: string): string;
+export declare function safeFileName(name: string): string;
+//# sourceMappingURL=store-utils.d.ts.map

package/dist/app-server/store-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-utils.d.ts","sourceRoot":"","sources":["../../src/app-server/store-utils.ts"],"names":[],"mappings":"AAEA,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAO/E;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrE;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASjD"}

package/dist/app-server/store-utils.js

@@ -0,0 +1,26 @@
+import { join, resolve } from 'node:path';
+export function ensureInsideRoot(rootDir, candidatePath) {
+    const root = resolve(rootDir);
+    const candidate = resolve(candidatePath);
+    if (!(candidate === root || candidate.startsWith(`${root}/`))) {
+        throw new Error(`Path outside allowed root: ${candidatePath}`);
+    }
+    return candidate;
+}
+export function encodeEvalId(absPath, rootDir) {
+    const rel = absPath.slice(resolve(rootDir).length + 1);
+    return Buffer.from(rel, 'utf8').toString('base64url');
+}
+export function decodeEvalId(id, rootDir) {
+    const rel = Buffer.from(id, 'base64url').toString('utf8');
+    return ensureInsideRoot(rootDir, join(rootDir, rel));
+}
+export function safeFileName(name) {
+    return (name
+        .trim()
+        .toLowerCase()
+        .replace(/[^a-z0-9-_]/g, '-')
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '') || `config-${Date.now()}`);
+}
+//# sourceMappingURL=store-utils.js.map

package/dist/app-server/store-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store-utils.js","sourceRoot":"","sources":["../../src/app-server/store-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,aAAqB;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,8BAA8B,aAAa,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAe;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,CACL,IAAI;SACD,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CACnD,CAAC;AACJ,CAAC"}