@jamesaphoenix/tx-api-server 0.1.1

package/dist/middleware/rate-limit.js

@@ -0,0 +1,296 @@
+/**
+ * Rate Limiting Middleware
+ *
+ * Provides configurable rate limiting to protect the API from abuse.
+ * Uses a sliding window algorithm with in-memory storage.
+ *
+ * Rate limiting is disabled by default; enable by setting TX_API_RATE_LIMIT env var.
+ *
+ * SECURITY NOTE: By default, proxy headers (X-Forwarded-For, X-Real-IP) are NOT trusted.
+ * Set TX_API_TRUST_PROXY=true ONLY when running behind a trusted reverse proxy.
+ * Otherwise, attackers can bypass rate limiting by spoofing these headers.
+ */
+import { randomUUID } from "node:crypto";
+/**
+ * IPv4 address pattern (basic validation).
+ */
+const IPV4_PATTERN = /^(\d{1,3}\.){3}\d{1,3}$/;
+/**
+ * IPv6 address pattern (basic validation - covers common formats).
+ */
+const IPV6_PATTERN = /^([0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{0,4}$|^::1$|^::$/;
+/**
+ * Validate that a string looks like a valid IP address.
+ * This is a basic check to prevent obviously invalid or malicious values.
+ */
+const isValidIpFormat = (ip) => {
+    const trimmed = ip.trim();
+    return IPV4_PATTERN.test(trimmed) || IPV6_PATTERN.test(trimmed);
+};
+/**
+ * In-memory store for rate limit tracking.
+ * Uses client IP as the key.
+ */
+const store = new Map();
+/**
+ * Cleanup interval for expired entries (5 minutes).
+ */
+const CLEANUP_INTERVAL_MS = 5 * 60 * 1000;
+/**
+ * Start cleanup interval on first use.
+ */
+let cleanupStarted = false;
+const startCleanup = () => {
+    if (cleanupStarted)
+        return;
+    cleanupStarted = true;
+    setInterval(() => {
+        const now = Date.now();
+        for (const [key, entry] of store.entries()) {
+            if (entry.expiresAt < now) {
+                store.delete(key);
+            }
+        }
+    }, CLEANUP_INTERVAL_MS).unref();
+};
+/**
+ * Check if rate limiting is enabled.
+ */
+export const isRateLimitEnabled = () => {
+    return !!process.env.TX_API_RATE_LIMIT;
+};
+/**
+ * Check if proxy headers should be trusted.
+ * Only enable this when running behind a trusted reverse proxy.
+ */
+export const isTrustProxyEnabled = () => {
+    return process.env.TX_API_TRUST_PROXY === "true";
+};
+/**
+ * Get rate limit configuration from environment.
+ */
+const getConfig = () => {
+    const envValue = process.env.TX_API_RATE_LIMIT;
+    const max = envValue ? parseInt(envValue, 10) : 100;
+    return {
+        max: isNaN(max) ? 100 : max,
+        windowSec: parseInt(process.env.TX_API_RATE_LIMIT_WINDOW ?? "60", 10) || 60,
+        message: process.env.TX_API_RATE_LIMIT_MESSAGE ?? "Too many requests, please try again later",
+        skipHealthEndpoints: process.env.TX_API_RATE_LIMIT_SKIP_HEALTH !== "false",
+        trustProxy: isTrustProxyEnabled()
+    };
+};
+/**
+ * Extract client IP from proxy headers (only when trustProxy is enabled).
+ * Validates IP format to prevent malicious header values.
+ */
+const getIpFromProxyHeaders = (c) => {
+    // Check X-Forwarded-For header
+    const forwarded = c.req.header("X-Forwarded-For");
+    if (forwarded) {
+        // Take the first IP in the chain (original client)
+        const ip = forwarded.split(",")[0].trim();
+        if (isValidIpFormat(ip)) {
+            return ip;
+        }
+    }
+    // Check X-Real-IP header
+    const realIp = c.req.header("X-Real-IP");
+    if (realIp) {
+        const ip = realIp.trim();
+        if (isValidIpFormat(ip)) {
+            return ip;
+        }
+    }
+    return null;
+};
+/**
+ * Extract client IP from the connection (socket level).
+ * Works with @hono/node-server when HttpBindings are available.
+ */
+const getConnectionIp = (c) => {
+    try {
+        // @hono/node-server exposes socket info via c.env.incoming
+        const incoming = c.env?.incoming;
+        if (incoming?.socket?.remoteAddress) {
+            const ip = incoming.socket.remoteAddress;
+            // Handle IPv6-mapped IPv4 addresses (::ffff:127.0.0.1 -> 127.0.0.1)
+            if (ip.startsWith("::ffff:")) {
+                return ip.slice(7);
+            }
+            return ip;
+        }
+    }
+    catch {
+        // Connection info not available in this runtime
+    }
+    return null;
+};
+/**
+ * Extract client identifier from request.
+ *
+ * SECURITY: Only trusts proxy headers (X-Forwarded-For, X-Real-IP) when
+ * TX_API_TRUST_PROXY=true. Otherwise, uses the actual connection IP.
+ *
+ * When running behind a trusted reverse proxy (nginx, cloud load balancer),
+ * set TX_API_TRUST_PROXY=true to get the real client IP from headers.
+ *
+ * When NOT behind a proxy, leave TX_API_TRUST_PROXY unset (default: false)
+ * to prevent attackers from bypassing rate limits by spoofing headers.
+ */
+const getClientId = (c) => {
+    const config = getConfig();
+    // Only trust proxy headers when explicitly enabled
+    if (config.trustProxy) {
+        const proxyIp = getIpFromProxyHeaders(c);
+        if (proxyIp) {
+            return proxyIp;
+        }
+    }
+    // Try to get the actual connection IP
+    const connectionIp = getConnectionIp(c);
+    if (connectionIp) {
+        return connectionIp;
+    }
+    // Fallback when connection info is not available
+    // Generate unique ID per request to prevent shared bucket DoS attacks
+    // SECURITY NOTE: This means rate limiting is ineffective for unidentifiable clients,
+    // but it's better than a shared bucket that allows attackers to block all anonymous users.
+    // In production with @hono/node-server, connection IP should be available.
+    console.warn("[rate-limit] Unable to identify client IP - rate limiting degraded for this request. " +
+        "Ensure your server runtime exposes socket info or configure a trusted reverse proxy.");
+    return `anon-${randomUUID()}`;
+};
+/**
+ * Check if the request should be rate limited.
+ * Returns the number of remaining requests, or -1 if rate limited.
+ */
+const checkRateLimit = (clientId, config) => {
+    const now = Date.now();
+    const windowMs = config.windowSec * 1000;
+    const windowStart = now - windowMs;
+    // Get or create entry for this client
+    let entry = store.get(clientId);
+    if (!entry) {
+        entry = {
+            timestamps: [],
+            expiresAt: now + windowMs * 2 // Keep entries for 2 windows for sliding window accuracy
+        };
+        store.set(clientId, entry);
+    }
+    // Filter out timestamps outside the current window
+    entry.timestamps = entry.timestamps.filter((ts) => ts > windowStart);
+    // Update expiration
+    entry.expiresAt = now + windowMs * 2;
+    // Calculate remaining requests
+    const remaining = Math.max(0, config.max - entry.timestamps.length);
+    // Calculate reset time (when oldest request in window expires)
+    const resetAt = entry.timestamps.length > 0
+        ? Math.ceil((entry.timestamps[0] + windowMs) / 1000)
+        : Math.ceil((now + windowMs) / 1000);
+    if (entry.timestamps.length >= config.max) {
+        return { remaining: -1, resetAt };
+    }
+    // Record this request
+    entry.timestamps.push(now);
+    return { remaining: remaining - 1, resetAt };
+};
+/**
+ * Rate limiting middleware.
+ * Only applies rate limiting if TX_API_RATE_LIMIT environment variable is set.
+ * If not set, all requests are allowed through.
+ */
+export const rateLimitMiddleware = async (c, next) => {
+    // Skip if rate limiting is not enabled
+    if (!isRateLimitEnabled()) {
+        return next();
+    }
+    const config = getConfig();
+    // Skip health endpoints if configured
+    if (config.skipHealthEndpoints) {
+        const path = c.req.path;
+        if (path === "/health" || path === "/api/health" || path === "/healthz") {
+            return next();
+        }
+    }
+    // Start cleanup interval
+    startCleanup();
+    const clientId = getClientId(c);
+    const { remaining, resetAt } = checkRateLimit(clientId, config);
+    // Set rate limit headers
+    c.header("X-RateLimit-Limit", String(config.max));
+    c.header("X-RateLimit-Remaining", String(Math.max(0, remaining)));
+    c.header("X-RateLimit-Reset", String(resetAt));
+    if (remaining < 0) {
+        const retryAfter = Math.max(1, resetAt - Math.floor(Date.now() / 1000));
+        c.header("Retry-After", String(retryAfter));
+        return c.json({
+            error: {
+                code: "RATE_LIMIT_EXCEEDED",
+                message: config.message
+            }
+        }, 429);
+    }
+    return next();
+};
+/**
+ * Create rate limit middleware with custom configuration.
+ * Useful for applying different limits to specific routes.
+ */
+export const createRateLimitMiddleware = (customConfig) => {
+    const store = new Map();
+    return async (c, next) => {
+        const defaultConfig = getConfig();
+        const config = { ...defaultConfig, ...customConfig };
+        // Start cleanup interval
+        startCleanup();
+        const clientId = getClientId(c);
+        const now = Date.now();
+        const windowMs = config.windowSec * 1000;
+        const windowStart = now - windowMs;
+        let entry = store.get(clientId);
+        if (!entry) {
+            entry = {
+                timestamps: [],
+                expiresAt: now + windowMs * 2
+            };
+            store.set(clientId, entry);
+        }
+        entry.timestamps = entry.timestamps.filter((ts) => ts > windowStart);
+        entry.expiresAt = now + windowMs * 2;
+        const remaining = Math.max(0, config.max - entry.timestamps.length);
+        const resetAt = entry.timestamps.length > 0
+            ? Math.ceil((entry.timestamps[0] + windowMs) / 1000)
+            : Math.ceil((now + windowMs) / 1000);
+        c.header("X-RateLimit-Limit", String(config.max));
+        c.header("X-RateLimit-Remaining", String(Math.max(0, remaining - 1)));
+        c.header("X-RateLimit-Reset", String(resetAt));
+        if (entry.timestamps.length >= config.max) {
+            const retryAfter = Math.max(1, resetAt - Math.floor(Date.now() / 1000));
+            c.header("Retry-After", String(retryAfter));
+            return c.json({
+                error: {
+                    code: "RATE_LIMIT_EXCEEDED",
+                    message: config.message
+                }
+            }, 429);
+        }
+        entry.timestamps.push(now);
+        return next();
+    };
+};
+/**
+ * Reset rate limit for a specific client.
+ * Useful for testing or administrative purposes.
+ */
+export const resetRateLimit = (clientId) => {
+    store.delete(clientId);
+};
+/**
+ * Clear all rate limit entries.
+ * Useful for testing.
+ */
+export const clearAllRateLimits = () => {
+    store.clear();
+};
+//# sourceMappingURL=rate-limit.js.map

package/dist/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAkBxC;;GAEG;AACH,MAAM,YAAY,GAAG,yBAAyB,CAAA;AAE9C;;GAEG;AACH,MAAM,YAAY,GAAG,uDAAuD,CAAA;AAE5E;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,EAAU,EAAW,EAAE;IAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;IACzB,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACjE,CAAC,CAAA;AAYD;;;GAGG;AACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAA;AAE/C;;GAEG;AACH,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAEzC;;GAEG;AACH,IAAI,cAAc,GAAG,KAAK,CAAA;AAE1B,MAAM,YAAY,GAAG,GAAS,EAAE;IAC9B,IAAI,cAAc;QAAE,OAAM;IAC1B,cAAc,GAAG,IAAI,CAAA;IAErB,WAAW,CAAC,GAAG,EAAE;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC1B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;IACH,CAAC,EAAE,mBAAmB,CAAC,CAAC,KAAK,EAAE,CAAA;AACjC,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAY,EAAE;IAC9C,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;AACxC,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAY,EAAE;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,MAAM,CAAA;AAClD,CAAC,CAAA;AAED;;GAEG;AACH,MAAM,SAAS,GAAG,GAAoB,EAAE;IACtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;IAC9C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;IAEnD,OAAO;QACL,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;QAC3B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QAC3E,OAAO,EACL,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,2CAA2C;QACtF,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,OAAO;QAC1E,UAAU,EAAE,mBAAmB,EAAE;KAClC,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAU,EAAiB,EAAE;IAC1D,+BAA+B;IAC/B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;IACjD,IAAI,SAAS,EAAE,CAAC;QACd,mDAAmD;QACnD,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACzC,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAA;QACxB,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,CAAsC,EAAiB,EAAE;IAChF,IAAI,CAAC;QACH,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAA;QAChC,IAAI,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAA;YACxC,oEAAoE;YACpE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACpB,CAAC;YACD,OAAO,EAAE,CAAA;QACX,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,GAAG,CAAC,CAAsC,EAAU,EAAE;IACrE,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAE1B,mDAAmD;IACnD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACxC,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAA;QAChB,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,iDAAiD;IACjD,sEAAsE;IACtE,qFAAqF;IACrF,2FAA2F;IAC3F,2EAA2E;IAC3E,OAAO,CAAC,IAAI,CACV,uFAAuF;QACrF,sFAAsF,CACzF,CAAA;IACD,OAAO,QAAQ,UAAU,EAAE,EAAE,CAAA;AAC/B,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAE,MAAuB,EAA0C,EAAE;IAC3G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAA;IACxC,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAA;IAElC,sCAAsC;IACtC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG;YACN,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC,yDAAyD;SACxF,CAAA;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC5B,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAA;IAEpE,oBAAoB;IACpB,KAAK,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAA;IAEpC,+BAA+B;IAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAEnE,+DAA+D;IAC/D,MAAM,OAAO,GACX,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAA;IAExC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAA;IACnC,CAAC;IAED,sBAAsB;IACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAE1B,OAAO,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,CAAA;AAC9C,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,CAAU,EAAE,IAAU,EAA4B,EAAE;IAC5F,uCAAuC;IACvC,IAAI,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAC1B,OAAO,IAAI,EAAE,CAAA;IACf,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAA;IAE1B,sCAAsC;IACtC,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA;QACvB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxE,OAAO,IAAI,EAAE,CAAA;QACf,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,YAAY,EAAE,CAAA;IAEd,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE/D,yBAAyB;IACzB,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAE9C,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QACvE,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;QAE3C,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,EAAE;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;SACF,EACD,GAAG,CACJ,CAAA;IACH,CAAC;IAED,OAAO,IAAI,EAAE,CAAA;AACf,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,YAAsC,EAAE,EAAE;IAClF,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAA;IAE/C,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAA4B,EAAE;QAChE,MAAM,aAAa,GAAG,SAAS,EAAE,CAAA;QACjC,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,YAAY,EAAE,CAAA;QAEpD,yBAAyB;QACzB,YAAY,EAAE,CAAA;QAEd,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAA;QACxC,MAAM,WAAW,GAAG,GAAG,GAAG,QAAQ,CAAA;QAElC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,GAAG,GAAG,QAAQ,GAAG,CAAC;aAC9B,CAAA;YACD,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;QAC5B,CAAC;QAED,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,WAAW,CAAC,CAAA;QACpE,KAAK,CAAC,SAAS,GAAG,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAA;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACnE,MAAM,OAAO,GACX,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;YACpD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAA;QAExC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACjD,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACrE,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;QAE9C,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;YACvE,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;YAE3C,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB;aACF,EACD,GAAG,CACJ,CAAA;QACH,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC1B,OAAO,IAAI,EAAE,CAAA;IACf,CAAC,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAQ,EAAE;IACvD,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AACxB,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAS,EAAE;IAC3C,KAAK,CAAC,KAAK,EAAE,CAAA;AACf,CAAC,CAAA"}

package/dist/routes/attempts.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Attempt Route Handlers
+ *
+ * Implements attempt endpoint handlers using Effect HttpApiBuilder.
+ * Tracks task approach outcomes (failed/succeeded).
+ */
+import { AttemptService } from "@jamesaphoenix/tx-core";
+export declare const AttemptsLive: import("effect/Layer").Layer<import("@effect/platform/HttpApiGroup").ApiGroup<"tx", "attempts">, never, AttemptService>;
+//# sourceMappingURL=attempts.d.ts.map

package/dist/routes/attempts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempts.d.ts","sourceRoot":"","sources":["../../src/routes/attempts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAOvD,eAAO,MAAM,YAAY,yHAsBxB,CAAA"}

package/dist/routes/attempts.js

@@ -0,0 +1,26 @@
+/**
+ * Attempt Route Handlers
+ *
+ * Implements attempt endpoint handlers using Effect HttpApiBuilder.
+ * Tracks task approach outcomes (failed/succeeded).
+ */
+import { HttpApiBuilder } from "@effect/platform";
+import { Effect } from "effect";
+import { serializeAttempt, assertTaskId, assertAttemptOutcome } from "@jamesaphoenix/tx-types";
+import { AttemptService } from "@jamesaphoenix/tx-core";
+import { TxApi, mapCoreError } from "../api.js";
+// -----------------------------------------------------------------------------
+// Handler Layer
+// -----------------------------------------------------------------------------
+export const AttemptsLive = HttpApiBuilder.group(TxApi, "attempts", (handlers) => handlers
+    .handle("listAttempts", ({ path }) => Effect.gen(function* () {
+    const attemptService = yield* AttemptService;
+    const attempts = yield* attemptService.listForTask(assertTaskId(path.id));
+    return { attempts: attempts.map(serializeAttempt) };
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("createAttempt", ({ path, payload }) => Effect.gen(function* () {
+    const attemptService = yield* AttemptService;
+    const attempt = yield* attemptService.create(assertTaskId(path.id), payload.approach, assertAttemptOutcome(payload.outcome), payload.reason ?? null);
+    return serializeAttempt(attempt);
+}).pipe(Effect.mapError(mapCoreError))));
+//# sourceMappingURL=attempts.js.map

package/dist/routes/attempts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attempts.js","sourceRoot":"","sources":["../../src/routes/attempts.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAE/C,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC/E,QAAQ;KACL,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,cAAc,CAAA;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IACzE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAA;AACrD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,eAAe,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,cAAc,CAAA;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAC1C,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EACrB,OAAO,CAAC,QAAQ,EAChB,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,EACrC,OAAO,CAAC,MAAM,IAAI,IAAI,CACvB,CAAA;IACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAA;AAClC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC,CACJ,CAAA"}

package/dist/routes/claims.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Claim Route Handlers
+ *
+ * Implements claim endpoint handlers using Effect HttpApiBuilder.
+ * Manages task claim lifecycle with lease-based expiration.
+ */
+import { ClaimService } from "@jamesaphoenix/tx-core";
+export declare const ClaimsLive: import("effect/Layer").Layer<import("@effect/platform/HttpApiGroup").ApiGroup<"tx", "claims">, never, ClaimService>;
+//# sourceMappingURL=claims.d.ts.map

package/dist/routes/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../src/routes/claims.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAsBrD,eAAO,MAAM,UAAU,qHA6BtB,CAAA"}

package/dist/routes/claims.js

@@ -0,0 +1,42 @@
+/**
+ * Claim Route Handlers
+ *
+ * Implements claim endpoint handlers using Effect HttpApiBuilder.
+ * Manages task claim lifecycle with lease-based expiration.
+ */
+import { HttpApiBuilder } from "@effect/platform";
+import { Effect } from "effect";
+import { ClaimService } from "@jamesaphoenix/tx-core";
+import { TxApi, mapCoreError } from "../api.js";
+// -----------------------------------------------------------------------------
+// Serialization Helper
+// -----------------------------------------------------------------------------
+const serializeClaim = (claim) => ({
+    id: claim.id,
+    taskId: claim.taskId,
+    workerId: claim.workerId,
+    claimedAt: claim.claimedAt.toISOString(),
+    leaseExpiresAt: claim.leaseExpiresAt.toISOString(),
+    renewedCount: claim.renewedCount,
+    status: claim.status,
+});
+// -----------------------------------------------------------------------------
+// Handler Layer
+// -----------------------------------------------------------------------------
+export const ClaimsLive = HttpApiBuilder.group(TxApi, "claims", (handlers) => handlers
+    .handle("createClaim", ({ payload }) => Effect.gen(function* () {
+    const claimService = yield* ClaimService;
+    const claim = yield* claimService.claim(payload.taskId, payload.workerId, payload.leaseDurationMinutes);
+    return serializeClaim(claim);
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("releaseClaim", ({ path }) => Effect.gen(function* () {
+    const claimService = yield* ClaimService;
+    yield* claimService.release(path.taskId, path.workerId);
+    return { success: true };
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("renewClaim", ({ path }) => Effect.gen(function* () {
+    const claimService = yield* ClaimService;
+    const claim = yield* claimService.renew(path.taskId, path.workerId);
+    return serializeClaim(claim);
+}).pipe(Effect.mapError(mapCoreError))));
+//# sourceMappingURL=claims.js.map

package/dist/routes/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../src/routes/claims.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAA;AAErD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAE/C,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF,MAAM,cAAc,GAAG,CAAC,KAAgB,EAAE,EAAE,CAAC,CAAC;IAC5C,EAAE,EAAE,KAAK,CAAC,EAAE;IACZ,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;IACxC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE;IAClD,YAAY,EAAE,KAAK,CAAC,YAAY;IAChC,MAAM,EAAE,KAAK,CAAC,MAAM;CACrB,CAAC,CAAA;AAEF,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC3E,QAAQ;KACL,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CACrC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,oBAAoB,CAC7B,CAAA;IACD,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;IACxC,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACvD,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAA;AACnC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAA;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;IACnE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAA;AAC9B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC,CACJ,CAAA"}

package/dist/routes/docs.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Doc Route Handlers
+ *
+ * Implements doc endpoint handlers using Effect HttpApiBuilder.
+ * Manages doc lifecycle, rendering, and linking.
+ */
+import { DocService } from "@jamesaphoenix/tx-core";
+export declare const DocsLive: import("effect/Layer").Layer<import("@effect/platform/HttpApiGroup").ApiGroup<"tx", "docs">, never, DocService>;
+//# sourceMappingURL=docs.d.ts.map

package/dist/routes/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/routes/docs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AA2BnD,eAAO,MAAM,QAAQ,iHA0EpB,CAAA"}

package/dist/routes/docs.js

@@ -0,0 +1,80 @@
+/**
+ * Doc Route Handlers
+ *
+ * Implements doc endpoint handlers using Effect HttpApiBuilder.
+ * Manages doc lifecycle, rendering, and linking.
+ */
+import { HttpApiBuilder } from "@effect/platform";
+import { Effect } from "effect";
+import { DocService } from "@jamesaphoenix/tx-core";
+import { assertDocKind, assertDocStatus, assertDocLinkType } from "@jamesaphoenix/tx-types";
+import { TxApi, mapCoreError } from "../api.js";
+// -----------------------------------------------------------------------------
+// Serialization Helper
+// -----------------------------------------------------------------------------
+const serializeDoc = (doc) => ({
+    id: doc.id,
+    kind: doc.kind,
+    name: doc.name,
+    title: doc.title,
+    version: doc.version,
+    status: doc.status,
+    filePath: doc.filePath ?? null,
+    hash: doc.hash,
+    createdAt: doc.createdAt.toISOString(),
+    updatedAt: null,
+    lockedAt: doc.lockedAt?.toISOString() ?? null,
+});
+// -----------------------------------------------------------------------------
+// Handler Layer
+// -----------------------------------------------------------------------------
+export const DocsLive = HttpApiBuilder.group(TxApi, "docs", (handlers) => handlers
+    .handle("listDocs", ({ urlParams }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    const filter = {};
+    if (urlParams.kind) {
+        filter.kind = assertDocKind(urlParams.kind);
+    }
+    if (urlParams.status) {
+        filter.status = assertDocStatus(urlParams.status);
+    }
+    const docs = yield* docService.list(filter);
+    return { docs: docs.map(serializeDoc) };
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("getDoc", ({ path }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    const doc = yield* docService.get(path.name);
+    return serializeDoc(doc);
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("createDoc", ({ payload }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    const doc = yield* docService.create({
+        kind: payload.kind,
+        name: payload.name,
+        title: payload.title,
+        yamlContent: payload.yamlContent,
+        metadata: payload.metadata,
+    });
+    return serializeDoc(doc);
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("updateDoc", ({ path, payload }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    const doc = yield* docService.update(path.name, payload.yamlContent);
+    return serializeDoc(doc);
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("lockDoc", ({ path }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    const doc = yield* docService.lock(path.name);
+    return serializeDoc(doc);
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("linkDoc", ({ path, payload }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    yield* docService.linkDocs(path.name, payload.toName, payload.linkType ? assertDocLinkType(payload.linkType) : undefined);
+    return { success: true };
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("renderDoc", ({ path }) => Effect.gen(function* () {
+    const docService = yield* DocService;
+    const rendered = yield* docService.render(path.name);
+    return { rendered };
+}).pipe(Effect.mapError(mapCoreError))));
+//# sourceMappingURL=docs.js.map

package/dist/routes/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/routes/docs.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAEnD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AAC3F,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAE/C,gFAAgF;AAChF,uBAAuB;AACvB,gFAAgF;AAEhF,MAAM,YAAY,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,CAAC;IAClC,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,OAAO,EAAE,GAAG,CAAC,OAAO;IACpB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;IAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;IACd,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;IACtC,SAAS,EAAE,IAAqB;IAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,IAAI;CAC9C,CAAC,CAAA;AAEF,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvE,QAAQ;KACL,MAAM,CAAC,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,MAAM,MAAM,GAA6F,EAAE,CAAA;IAC3G,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAC7C,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC3C,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAA;AACzC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAA;IACF,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;IACpE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,OAAO,YAAY,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CACxB,IAAI,CAAC,IAAI,EACT,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CACnE,CAAA;IACD,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,CAAA;AACnC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAChC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpD,OAAO,EAAE,QAAQ,EAAE,CAAA;AACrB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC,CACJ,CAAA"}

package/dist/routes/health.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Health Route Handlers
+ *
+ * Implements health check and stats endpoint handlers.
+ */
+import { TaskService, LearningService, RunRepository } from "@jamesaphoenix/tx-core";
+export declare const HealthLive: import("effect/Layer").Layer<import("@effect/platform/HttpApiGroup").ApiGroup<"tx", "health">, never, TaskService | LearningService | RunRepository>;
+//# sourceMappingURL=health.d.ts.map

package/dist/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAQpF,eAAO,MAAM,UAAU,sJAkHtB,CAAA"}

package/dist/routes/health.js

@@ -0,0 +1,101 @@
+/**
+ * Health Route Handlers
+ *
+ * Implements health check and stats endpoint handlers.
+ */
+import { HttpApiBuilder, HttpServerRequest } from "@effect/platform";
+import { Effect } from "effect";
+import { TaskService, LearningService, RunRepository } from "@jamesaphoenix/tx-core";
+import { TxApi, mapCoreError } from "../api.js";
+import { extractApiKey, timingSafeEqual } from "../middleware/auth.js";
+// -----------------------------------------------------------------------------
+// Handler Layer
+// -----------------------------------------------------------------------------
+export const HealthLive = HttpApiBuilder.group(TxApi, "health", (handlers) => handlers
+    .handle("health", () => Effect.gen(function* () {
+    let dbConnected = true;
+    const result = yield* Effect.gen(function* () {
+        const taskService = yield* TaskService;
+        yield* taskService.listWithDeps({ limit: 1 });
+    }).pipe(Effect.either);
+    if (result._tag === "Left") {
+        dbConnected = false;
+    }
+    // Only expose database path when auth is enabled AND request is authenticated
+    const showSensitive = yield* Effect.gen(function* () {
+        const apiKey = process.env.TX_API_KEY;
+        if (!apiKey)
+            return false;
+        const request = yield* HttpServerRequest.HttpServerRequest;
+        const providedKey = extractApiKey(request.headers);
+        if (!providedKey)
+            return false;
+        return timingSafeEqual(providedKey, apiKey);
+    });
+    const dbPath = showSensitive
+        ? (process.env.TX_DB_PATH ?? ".tx/tasks.db")
+        : null;
+    return {
+        status: dbConnected ? "healthy" : "degraded",
+        timestamp: new Date().toISOString(),
+        version: "0.1.0",
+        database: {
+            connected: dbConnected,
+            path: dbPath,
+        },
+    };
+}))
+    .handle("stats", () => Effect.gen(function* () {
+    const taskService = yield* TaskService;
+    const learningService = yield* LearningService;
+    const runRepo = yield* RunRepository;
+    const allTasks = yield* taskService.listWithDeps({});
+    const learningsCount = yield* learningService.count();
+    const runCounts = yield* runRepo.countByStatus();
+    let done = 0;
+    let ready = 0;
+    for (const task of allTasks) {
+        if (task.status === "done")
+            done++;
+        if (task.isReady)
+            ready++;
+    }
+    const runsTotal = Object.values(runCounts).reduce((a, b) => a + b, 0);
+    return {
+        tasks: allTasks.length,
+        done,
+        ready,
+        learnings: learningsCount,
+        runsRunning: runCounts.running ?? 0,
+        runsTotal,
+    };
+}).pipe(Effect.mapError(mapCoreError)))
+    .handle("ralph", () => Effect.gen(function* () {
+    const fs = yield* Effect.promise(() => import("node:fs"));
+    const path = yield* Effect.promise(() => import("node:path"));
+    const stateFile = path.join(process.cwd(), ".tx", "ralph-state");
+    let running = false;
+    let pid = null;
+    let currentIteration = 0;
+    let currentTask = null;
+    try {
+        if (fs.existsSync(stateFile)) {
+            const state = JSON.parse(fs.readFileSync(stateFile, "utf-8"));
+            running = state.running ?? false;
+            pid = state.pid ?? null;
+            currentIteration = state.iteration ?? 0;
+            currentTask = state.currentTask ?? null;
+        }
+    }
+    catch (error) {
+        console.warn(`[health] Failed to parse RALPH state file at ${stateFile}:`, error instanceof Error ? error.message : String(error));
+    }
+    return {
+        running,
+        pid,
+        currentIteration,
+        currentTask,
+        recentActivity: [],
+    };
+})));
+//# sourceMappingURL=health.js.map

package/dist/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AACpF,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEtE,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC3E,QAAQ;KACL,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CACrB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,WAAW,GAAG,IAAI,CAAA;IAEtB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACxC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;QACtC,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEtB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,WAAW,GAAG,KAAK,CAAA;IACrB,CAAC;IAED,8EAA8E;IAC9E,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAA;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QAEzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAA;QAC1D,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,OAAwD,CAAC,CAAA;QACnG,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAA;QAE9B,OAAO,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,aAAa;QAC1B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,cAAc,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAA;IAER,OAAO;QACL,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,UAAmB;QAC9D,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE;YACR,SAAS,EAAE,WAAW;YACtB,IAAI,EAAE,MAAM;SACb;KACF,CAAA;AACH,CAAC,CAAC,CACH;KAEA,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;IACtC,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,eAAe,CAAA;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAA;IAEpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IACpD,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,CAAA;IACrD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,CAAA;IAEhD,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,EAAE,CAAA;QAClC,IAAI,IAAI,CAAC,OAAO;YAAE,KAAK,EAAE,CAAA;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAErE,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,IAAI;QACJ,KAAK;QACL,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,SAAS,CAAC,OAAO,IAAI,CAAC;QACnC,SAAS;KACV,CAAA;AACH,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CACvC;KAEA,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAA;IAE7D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAA;IAChE,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,GAAG,GAAkB,IAAI,CAAA;IAC7B,IAAI,gBAAgB,GAAG,CAAC,CAAA;IACxB,IAAI,WAAW,GAAkB,IAAI,CAAA;IAErC,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;YAC7D,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAA;YAChC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAA;YACvB,gBAAgB,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,CAAA;YACvC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAA;QACzC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,gDAAgD,SAAS,GAAG,EAC5D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAA;IACH,CAAC;IAED,OAAO;QACL,OAAO;QACP,GAAG;QACH,gBAAgB;QAChB,WAAW;QACX,cAAc,EAAE,EAOd;KACH,CAAA;AACH,CAAC,CAAC,CACH,CACJ,CAAA"}