@intentface/latch-server 0.9.1

package/dist/handler.test.js

@@ -0,0 +1,238 @@
+import { describe, expect, it, vi } from "vitest";
+import { createLatchHandler } from "./handler.js";
+/** Mirror of oauth.ts's payload half: `<csrf>.<b64url(JSON)>`. */
+function encodeState(payload) {
+    const s = JSON.stringify(payload);
+    let bin = "";
+    for (const ch of new TextEncoder().encode(s))
+        bin += String.fromCharCode(ch);
+    const b64 = btoa(bin).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+    return `deadbeef.${b64}`;
+}
+function build(opts) {
+    const start = vi.fn(async (_p, _o) => ({
+        status: "redirect",
+        authorizationUrl: "https://idp.example/authorize",
+    }));
+    const finish = vi.fn(async (_p, _params) => ({
+        status: "authorized",
+    }));
+    const oauth = { isAuthorized: async () => false, start, finish, provider: () => ({}) };
+    const conns = {
+        oauth: (name) => (name === "loredex" ? oauth : undefined),
+        status: async () => [],
+        testTools: async () => [],
+    };
+    const resolveContext = vi.fn(opts?.resolveContext ?? (() => ({ orgId: "org_a", userId: "u1" })));
+    const handler = createLatchHandler({
+        runtime: {},
+        connections: conns,
+        basePath: "/api/latch",
+        resolveContext,
+        reconstructPrincipal: opts?.reconstructPrincipal,
+        oauthFlowMaxAgeMs: opts?.oauthFlowMaxAgeMs,
+    });
+    return { handler, start, finish, resolveContext };
+}
+const authorize = (q = "") => new Request(`https://app.example/api/latch/connections/loredex/authorize${q}`);
+const callback = (state, code = "abc") => new Request(`https://app.example/api/latch/connections/loredex/callback?code=${code}&state=${encodeURIComponent(state)}`);
+describe("authorize", () => {
+    it("pins the resolved principal (+ iat) into the flow state", async () => {
+        const { handler, start } = build();
+        const res = await handler(authorize("?returnTo=/chat/c1"));
+        expect(res?.status).toBe(302);
+        const state = start.mock.calls[0][1]?.state;
+        expect(state.returnTo).toBe("/chat/c1");
+        const pin = state.__latch;
+        expect(pin.p).toEqual({ orgId: "org_a", userId: "u1" });
+        expect(typeof pin.iat).toBe("number");
+        expect(Math.abs(Date.now() - pin.iat)).toBeLessThan(5_000);
+    });
+});
+describe("callback with a pinned principal", () => {
+    const pinnedState = (iat = Date.now()) => encodeState({
+        returnTo: "/chat/c1",
+        __latch: { p: { orgId: "org_pinned", userId: "u_pinned" }, iat },
+    });
+    it("rebuilds identity from the pin — the session is never consulted", async () => {
+        const { handler, finish, resolveContext } = build({
+            // A live session would resolve to a DIFFERENT principal (the incident
+            // shape: personal tenant). It must not be asked at all.
+            resolveContext: () => {
+                throw new Error("resolveContext must not run on a pinned callback");
+            },
+        });
+        const res = await handler(callback(pinnedState()));
+        expect(res?.status).toBe(302);
+        expect(res?.headers.get("location")).toContain("connected=loredex");
+        expect(resolveContext).not.toHaveBeenCalled();
+        // finish — and therefore the token write — ran under the PINNED principal.
+        expect(finish.mock.calls[0][0]).toEqual({ orgId: "org_pinned", userId: "u_pinned" });
+    });
+    it("routes the pin through reconstructPrincipal and 401s on null", async () => {
+        const seen = [];
+        const { handler, finish } = build({
+            reconstructPrincipal: (identity) => {
+                seen.push(identity);
+                return null; // e.g. the user is no longer an org member
+            },
+        });
+        const res = await handler(callback(pinnedState()));
+        expect(res?.status).toBe(401);
+        expect(seen).toEqual([{ orgId: "org_pinned", userId: "u_pinned" }]);
+        expect(finish).not.toHaveBeenCalled();
+    });
+    it("rejects a stale pin with ?error=flow_expired", async () => {
+        const { handler, finish } = build({ oauthFlowMaxAgeMs: 60_000 });
+        const res = await handler(callback(pinnedState(Date.now() - 120_000)));
+        expect(res?.status).toBe(302);
+        const loc = res?.headers.get("location") ?? "";
+        expect(loc).toContain("error=flow_expired");
+        expect(loc.startsWith("/chat/c1")).toBe(true);
+        expect(finish).not.toHaveBeenCalled();
+    });
+});
+describe("callback without a pin", () => {
+    it.each([
+        ["no state param", "https://app.example/api/latch/connections/loredex/callback?code=abc"],
+        ["malformed state", "https://app.example/api/latch/connections/loredex/callback?code=abc&state=not-a-state"],
+    ])("%s is rejected as expired and never reaches the session", async (_label, href) => {
+        const { handler, finish, resolveContext } = build({
+            resolveContext: () => {
+                throw new Error("resolveContext must not run on any callback");
+            },
+        });
+        const res = await handler(new Request(href));
+        expect(res?.status).toBe(302);
+        const loc = res?.headers.get("location") ?? "";
+        expect(loc.startsWith("/")).toBe(true);
+        expect(loc).toContain("error=flow_expired");
+        expect(resolveContext).not.toHaveBeenCalled();
+        expect(finish).not.toHaveBeenCalled();
+    });
+    it("is rejected as expired — the session is never a stand-in for a flow", async () => {
+        const { handler, finish, resolveContext } = build({
+            resolveContext: () => {
+                throw new Error("resolveContext must not run on any callback");
+            },
+        });
+        const res = await handler(callback(encodeState({ returnTo: "/x" })));
+        expect(res?.status).toBe(302);
+        const loc = res?.headers.get("location") ?? "";
+        expect(loc.startsWith("/x")).toBe(true);
+        expect(loc).toContain("error=flow_expired");
+        expect(resolveContext).not.toHaveBeenCalled();
+        expect(finish).not.toHaveBeenCalled();
+    });
+});
+function buildRoutes(opts) {
+    const schedule = vi.fn(async (input) => ({
+        id: "sch_1",
+        ...input,
+    }));
+    const runScheduleNow = vi.fn(async (_i) => opts?.runNow ?? true);
+    const unschedule = vi.fn(async (_i) => { });
+    const listSchedules = vi.fn(async () => opts?.schedules ?? []);
+    const listRuns = vi.fn(async () => [
+        {
+            id: "run_1",
+            chatId: "chat_1",
+            agent: "briefer",
+            status: "awaiting_input",
+            identity: { orgId: "org_a", userId: "u1", plan: "enterprise" },
+            costTotal: 0.19,
+            startedAt: 1,
+        },
+    ]);
+    const handler = createLatchHandler({
+        runtime: { schedule, runScheduleNow, unschedule, listSchedules, listRuns },
+        connections: { oauth: () => undefined, status: async () => [], testTools: async () => [] },
+        basePath: "/api/latch",
+        resolveContext: () => ({ orgId: "org_a", userId: "u1" }),
+    });
+    return { handler, schedule, runScheduleNow, unschedule, listSchedules };
+}
+const post = (path, body) => new Request(`https://app.example/api/latch/${path}`, {
+    method: "POST",
+    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+});
+const get = (path) => new Request(`https://app.example/api/latch/${path}`);
+describe("POST /schedules", () => {
+    it("forwards delivery and onParked to runtime.schedule", async () => {
+        const { handler, schedule } = buildRoutes();
+        const res = await handler(post("schedules", {
+            agent: "briefer",
+            cron: "0 8 * * *",
+            timezone: "Europe/Helsinki",
+            prompt: "morning brief",
+            delivery: { kind: "slack", appId: "A1", channel: "C1" },
+            onParked: "fire",
+        }));
+        expect(res?.status).toBe(200);
+        const passed = schedule.mock.calls[0][0];
+        expect(passed.delivery).toEqual({ kind: "slack", appId: "A1", channel: "C1" });
+        expect(passed.onParked).toBe("fire");
+        expect(passed.timezone).toBe("Europe/Helsinki");
+        // Echoed back, so a caller can see what actually stuck.
+        expect((await res.json()).schedule.delivery).toEqual({
+            kind: "slack",
+            appId: "A1",
+            channel: "C1",
+        });
+    });
+    it("omits both when unset — no invented defaults", async () => {
+        const { handler, schedule } = buildRoutes();
+        await handler(post("schedules", { agent: "briefer", cron: null, prompt: "brief" }));
+        const passed = schedule.mock.calls[0][0];
+        expect(passed.delivery).toBeUndefined();
+        expect(passed.onParked).toBeUndefined();
+    });
+    it("400s an unknown onParked instead of silently defaulting it", async () => {
+        const { handler, schedule } = buildRoutes();
+        const res = await handler(post("schedules", { agent: "briefer", cron: null, prompt: "b", onParked: "skipp" }));
+        expect(res?.status).toBe(400);
+        expect(schedule).not.toHaveBeenCalled();
+    });
+});
+describe("GET /schedules/:id and POST /schedules/:id/run-now", () => {
+    it("returns one of the caller's schedules", async () => {
+        const { handler } = buildRoutes({
+            schedules: [{ id: "sch_1", agent: "briefer", prompt: "a" }],
+        });
+        const res = await handler(get("schedules/sch_1"));
+        expect(res?.status).toBe(200);
+        expect((await res.json()).schedule.id).toBe("sch_1");
+    });
+    it("404s an id that isn't in the caller's own list (another tenant's included)", async () => {
+        const { handler } = buildRoutes({ schedules: [] });
+        expect((await handler(get("schedules/sch_other")))?.status).toBe(404);
+    });
+    it("arms run-now through the runtime, and 404s a spent one-shot", async () => {
+        const { handler, runScheduleNow } = buildRoutes();
+        expect((await handler(post("schedules/sch_1/run-now")))?.status).toBe(200);
+        expect(runScheduleNow.mock.calls[0][0]).toEqual({
+            principal: { orgId: "org_a", userId: "u1" },
+            id: "sch_1",
+        });
+        const spent = buildRoutes({ runNow: false });
+        expect((await spent.handler(post("schedules/sch_1/run-now")))?.status).toBe(404);
+    });
+    it("still deletes on DELETE /schedules/:id", async () => {
+        const { handler, unschedule } = buildRoutes();
+        const res = await handler(new Request("https://app.example/api/latch/schedules/sch_1", { method: "DELETE" }));
+        expect(res?.status).toBe(200);
+        expect(unschedule).toHaveBeenCalled();
+    });
+});
+describe("GET /runs", () => {
+    it("strips the identity blob — the principal is server state, not a payload", async () => {
+        const { handler } = buildRoutes();
+        const res = await handler(get("runs"));
+        const { runs } = (await res.json());
+        expect(runs).toHaveLength(1);
+        expect("identity" in runs[0]).toBe(false);
+        // Everything a cost/usage UI actually needs still comes through.
+        expect(runs[0]).toMatchObject({ id: "run_1", chatId: "chat_1", costTotal: 0.19 });
+    });
+});
+//# sourceMappingURL=handler.test.js.map

package/dist/handler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.test.js","sourceRoot":"","sources":["../src/handler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAkBlD,kEAAkE;AAClE,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,OAAO,YAAY,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,KAAK,CAAC,IAId;IACC,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAK,EAAE,EAAwC,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,UAAmB;QAC3B,gBAAgB,EAAE,+BAA+B;KAClD,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAK,EAAE,OAAyC,EAAE,EAAE,CAAC,CAAC;QAChF,MAAM,EAAE,YAAqB;KAC9B,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACvF,MAAM,KAAK,GAAG;QACZ,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACjE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;QACtB,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;KAC1B,CAAC;IACF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAC1B,IAAI,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CACnE,CAAC;IACF,MAAM,OAAO,GAAG,kBAAkB,CAAI;QACpC,OAAO,EAAE,EAAW;QACpB,WAAW,EAAE,KAAc;QAC3B,QAAQ,EAAE,YAAY;QACtB,cAAc;QACd,oBAAoB,EAAE,IAAI,EAAE,oBAAoB;QAChD,iBAAiB,EAAE,IAAI,EAAE,iBAAiB;KAC3C,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAC3B,IAAI,OAAO,CAAC,8DAA8D,CAAC,EAAE,CAAC,CAAC;AACjF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE,CAC/C,IAAI,OAAO,CACT,mEAAmE,IAAI,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC7G,CAAC;AAEJ,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAgC,CAAC;QACxE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAgC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,MAAM,WAAW,GAAG,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CACvC,WAAW,CAAC;QACV,QAAQ,EAAE,UAAU;QACpB,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE;KACjE,CAAC,CAAC;IAEL,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;YAChD,sEAAsE;YACtE,wDAAwD;YACxD,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACpE,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,2EAA2E;QAC3E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;YAChC,oBAAoB,EAAE,CAAC,QAAQ,EAAE,EAAE;gBACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACpB,OAAO,IAAI,CAAC,CAAC,2CAA2C;YAC1D,CAAC;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,gBAAgB,EAAE,qEAAqE,CAAC;QACzF,CAAC,iBAAiB,EAAE,uFAAuF,CAAC;KAC7G,CAAC,CAAC,yDAAyD,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACnF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;YAChD,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;YAChD,cAAc,EAAE,GAAG,EAAE;gBACnB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAmBH,SAAS,WAAW,CAAC,IAAuD;IAC1E,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAA8B,EAAE,EAAE,CAAC,CAAC;QAChE,EAAE,EAAE,OAAO;QACX,GAAG,KAAK;KACT,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAgC,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;IAC/F,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAgC,EAAE,EAAE,GAAE,CAAC,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC;YACE,EAAE,EAAE,OAAO;YACX,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE;YAC9D,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,CAAC;SACb;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,kBAAkB,CAAI;QACpC,OAAO,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAW;QACnF,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAW;QACnG,QAAQ,EAAE,YAAY;QACtB,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAc,EAAE,EAAE,CAC5C,IAAI,OAAO,CAAC,iCAAiC,IAAI,EAAE,EAAE;IACnD,MAAM,EAAE,MAAM;IACd,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AACL,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;AAEnF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,WAAW,EAAE;YAChB,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,eAAe;YACvB,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;YACvD,QAAQ,EAAE,MAAM;SACjB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAA4B,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,wDAAwD;QACxD,MAAM,CAAC,CAAC,MAAM,GAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACpD,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;QAC5C,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAA4B,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CACpF,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC;YAC9B,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,MAAM,GAAI,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,WAAW,EAAE,CAAC;QAClD,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC/C,SAAS,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;YAC3C,EAAE,EAAE,OAAO;SACZ,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,+CAA+C,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CACnF,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,UAAU,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAI,CAAC,IAAI,EAAE,CAAwC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,iEAAiE;QACjE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/hono.d.ts

@@ -0,0 +1,20 @@
+import { Hono } from "hono";
+import type { LatchHandlerConfig } from "./handler.js";
+import type { LatchApp, LatchAppConfig } from "./app.js";
+/**
+ * A mountable Hono app over the framework-agnostic `createLatchHandler`. Mount
+ * it under any prefix with your own middleware, or run it standalone. Identical
+ * routes/behavior to the bare handler — this is just the Hono adapter, kept in a
+ * subpath export (`@intentface/latch-server/hono`) so `hono` stays an optional
+ * peer dependency for hosts that don't use it (TanStack Start, Next, etc.).
+ */
+export type LatchServerConfig<P> = LatchHandlerConfig<P>;
+export declare function createLatchHono<P>(config: LatchServerConfig<P>): Hono;
+/**
+ * `createLatchApp` + a mounted Hono app in one call: the whole backend, ready
+ * to `serve({ fetch: app.fetch })` or `app.route("/api/latch", …)` into yours.
+ */
+export declare function createLatchHonoApp<P, RC = unknown>(config: LatchAppConfig<P, RC>): Promise<LatchApp<P> & {
+    app: Hono;
+}>;
+//# sourceMappingURL=hono.d.ts.map

package/dist/hono.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono.d.ts","sourceRoot":"","sources":["../src/hono.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAEvD,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAEzD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI,CAGrE;AAQD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,EACtD,MAAM,EAAE,cAAc,CAAC,CAAC,EAAE,EAAE,CAAC,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;IAAE,GAAG,EAAE,IAAI,CAAA;CAAE,CAAC,CAGtC"}

package/dist/hono.js

@@ -0,0 +1,21 @@
+import { Hono } from "hono";
+import { createLatchHandler } from "./handler.js";
+import { createLatchApp } from "./app.js";
+export function createLatchHono(config) {
+    const handler = createLatchHandler(config);
+    return honoOver(handler);
+}
+function honoOver(handler) {
+    const app = new Hono();
+    app.all("*", async (c) => (await handler(c.req.raw)) ?? c.notFound());
+    return app;
+}
+/**
+ * `createLatchApp` + a mounted Hono app in one call: the whole backend, ready
+ * to `serve({ fetch: app.fetch })` or `app.route("/api/latch", …)` into yours.
+ */
+export async function createLatchHonoApp(config) {
+    const latch = await createLatchApp(config);
+    return { ...latch, app: honoOver(latch.handler) };
+}
+//# sourceMappingURL=hono.js.map

package/dist/hono.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hono.js","sourceRoot":"","sources":["../src/hono.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAY1C,MAAM,UAAU,eAAe,CAAI,MAA4B;IAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,QAAQ,CAAC,OAAwD;IACxE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAA6B;IAE7B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAQ,MAAM,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AACpD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * @intentface/latch-server
+ *
+ * The mountable Latch HTTP surface — one framework-agnostic Web handler that
+ * exposes the whole runtime (chat, approvals, chat/run lists, history) and the
+ * generic MCP connection OAuth. Mount `createLatchHandler({ runtime, connections,
+ * resolveContext })` at a single route in any Web-standard host (TanStack Start,
+ * Next, Bun, Deno, serverless). For Hono, see `@intentface/latch-server/hono`.
+ *
+ * The routes are a convenience over the real contract — the Runtime operations —
+ * which you can still call directly from your own routes / non-HTTP triggers.
+ *
+ * `createLatchApp({ storage, agents, resolveContext })` is the composition root
+ * with every default wired (durability, cron, model catalog, harness tools) —
+ * the shortest path from nothing to a running agent backend.
+ */
+export { createLatchHandler } from "./handler.js";
+export type { LatchHandlerConfig, LatchHandler } from "./handler.js";
+export { createCronerEvaluator } from "./cron.js";
+export { createLatchApp } from "./app.js";
+export type { LatchAppConfig, LatchApp } from "./app.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+/**
+ * @intentface/latch-server
+ *
+ * The mountable Latch HTTP surface — one framework-agnostic Web handler that
+ * exposes the whole runtime (chat, approvals, chat/run lists, history) and the
+ * generic MCP connection OAuth. Mount `createLatchHandler({ runtime, connections,
+ * resolveContext })` at a single route in any Web-standard host (TanStack Start,
+ * Next, Bun, Deno, serverless). For Hono, see `@intentface/latch-server/hono`.
+ *
+ * The routes are a convenience over the real contract — the Runtime operations —
+ * which you can still call directly from your own routes / non-HTTP triggers.
+ *
+ * `createLatchApp({ storage, agents, resolveContext })` is the composition root
+ * with every default wired (durability, cron, model catalog, harness tools) —
+ * the shortest path from nothing to a running agent backend.
+ */
+export { createLatchHandler } from "./handler.js";
+export { createCronerEvaluator } from "./cron.js";
+export { createLatchApp } from "./app.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,18 @@
+import { Hono } from "hono";
+import type { Principal, Runtime } from "@intentface/latch-core";
+/**
+ * A mountable Hono app exposing the runtime over HTTP.
+ *
+ * Default route: `POST /agents/:agent/:id` — prompt the agent in conversation
+ * `:id` (a client-chosen key, tenant-namespaced here), returning a streaming
+ * UIMessage Response. Mount it under any prefix + your own middleware (embed),
+ * or run it standalone. Auth is BYO via `resolveContext` — the core never
+ * authenticates; everything below is scoped by the returned `Principal`.
+ */
+export interface LatchServerConfig {
+    runtime: Runtime;
+    /** Map a request to a Principal (your existing auth). */
+    resolveContext: (request: Request) => Principal | Promise<Principal>;
+}
+export declare function createLatchHono(config: LatchServerConfig): Hono;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAGV,SAAS,EACT,OAAO,EACR,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,yDAAyD;IACzD,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACtE;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAwC/D"}

package/dist/server.js

@@ -0,0 +1,61 @@
+import { Hono } from "hono";
+export function createLatchHono(config) {
+    const app = new Hono();
+    app.post("/agents/:agent/:id", async (c) => {
+        const principal = await config.resolveContext(c.req.raw);
+        const agent = c.req.param("agent");
+        const rawId = c.req.param("id");
+        // Tenant-namespaced chat key: org_a's "ticket-1" ≠ org_b's "ticket-1".
+        const chatId = `${principal.orgId}:${rawId}`;
+        const body = (await c.req
+            .json()
+            .catch(() => ({})));
+        const message = toUserMessage(body);
+        return config.runtime.handleChat({
+            agent,
+            chatId,
+            principal,
+            message,
+            request: c.req.raw,
+        });
+    });
+    // HITL: submit tool-approval decisions and continue the turn (streams the
+    // continuation, same as a chat turn). Body: `{ decisions: [{approvalId, approved, reason?}] }`.
+    app.post("/agents/:agent/:id/approvals", async (c) => {
+        const principal = await config.resolveContext(c.req.raw);
+        const chatId = `${principal.orgId}:${c.req.param("id")}`;
+        const body = (await c.req.json().catch(() => ({})));
+        const decisions = Array.isArray(body.decisions) ? body.decisions : [];
+        return config.runtime.applyApproval({
+            chatId,
+            principal,
+            decisions,
+            request: c.req.raw,
+        });
+    });
+    return app;
+}
+/** Accept `{ message }`, `{ text }`, or a `useChat`-style `{ messages }` (last). */
+function toUserMessage(body) {
+    const explicit = body.message;
+    if (explicit?.parts)
+        return explicit;
+    let text = "";
+    if (typeof body.text === "string") {
+        text = body.text;
+    }
+    else if (Array.isArray(body.messages)) {
+        const last = body.messages[body.messages.length - 1];
+        text = (last?.parts ?? [])
+            .filter((p) => p.type === "text")
+            .map((p) => p.text)
+            .join("");
+    }
+    return {
+        id: crypto.randomUUID(),
+        role: "user",
+        parts: [{ type: "text", text }],
+        metadata: { visibility: "user", createdAt: Date.now() },
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAuB5B,MAAM,UAAU,eAAe,CAAC,MAAyB;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,uEAAuE;QACvE,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG;aACtB,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;QACjD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/B,KAAK;YACL,MAAM;YACN,SAAS;YACT,OAAO;YACP,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,gGAAgG;IAChG,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjD,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;YAClC,MAAM;YACN,SAAS;YACT,SAAS;YACT,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,IAA6B;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAiC,CAAC;IACxD,IAAI,QAAQ,EAAE,KAAK;QAAE,OAAO,QAAQ,CAAC;IAErC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAEtC,CAAC;QACd,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;QACvB,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC/B,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE;KACxD,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@intentface/latch-server",
+  "version": "0.9.1",
+  "description": "The mountable Latch HTTP surface — one framework-agnostic Web handler (chat, approvals, lists, MCP connection OAuth). Hono adapter in the /hono subpath.",
+  "keywords": [
+    "ai",
+    "ai-sdk",
+    "agents",
+    "llm",
+    "http",
+    "hono",
+    "webhooks"
+  ],
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./hono": {
+      "types": "./dist/hono.d.ts",
+      "import": "./dist/hono.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "dependencies": {
+    "croner": "^10.0.1",
+    "@intentface/latch-core": "^0.9.1",
+    "@intentface/latch-mcp": "^0.9.1"
+  },
+  "peerDependencies": {
+    "ai": ">=7.0.0-beta.178",
+    "hono": ">=4"
+  },
+  "peerDependenciesMeta": {
+    "hono": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "ai": "7.0.0-beta.178",
+    "hono": "^4.6.0",
+    "typescript": "^5.7.0",
+    "vitest": "^4"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Intentface/intentface-latch.git",
+    "directory": "packages/server"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}