@jasonews/agent-squad-gateway 1.0.0

package/dist/server/app.js

@@ -0,0 +1,178 @@
+import Fastify, {} from 'fastify';
+import { formatGatewayAddress, gatewayLoopbackOrigin } from '../config/config.js';
+import { CoreClient } from '../core-client/client.js';
+import { CoreConnectionRepository } from '../control-plane/core-connection.js';
+import { IdempotencyService } from '../control-plane/idempotency.js';
+import { RetentionService } from '../control-plane/retention.js';
+import { ResponseSessionRepository } from '../control-plane/response-sessions.js';
+import { openAIExtension } from '../extensions/openai/routes.js';
+import { GatewayExtensionRegistry } from '../extensions/registry.js';
+import { CapabilityService } from '../provider-runtime/capability-service.js';
+import { InvocationService } from '../provider-runtime/invocation-service.js';
+import { registerBuiltInProviders, } from '../provider-runtime/register-providers.js';
+import { ProviderRegistry } from '../provider-runtime/registry.js';
+import { TargetScheduler } from '../provider-runtime/scheduler.js';
+import { WorkspaceManager } from '../provider-runtime/workspaces.js';
+import { ReplayBuffer } from '../provider-runtime/replay-buffer.js';
+import { registerAdminRoutes } from './admin-routes.js';
+import { VITE_DEV_ORIGIN } from './auth-hooks.js';
+import { registerCoreRoutes } from './core-routes.js';
+import { sendGatewayError } from './errors.js';
+import { registerUiRoutes } from './ui-routes.js';
+export function buildGatewayApp(deps) {
+    const app = Fastify({ logger: false });
+    const gatewayOrigin = gatewayLoopbackOrigin(deps.config);
+    const bindOrigin = `http://${formatGatewayAddress(deps.config.host, deps.config.port)}`;
+    const trustedAdminOrigins = new Set([gatewayOrigin, bindOrigin, VITE_DEV_ORIGIN]);
+    app.setErrorHandler((error, _request, reply) => sendGatewayError(reply, error));
+    const providers = deps.providers ?? new ProviderRegistry();
+    const coreConnection = deps.coreConnection ?? new CoreConnectionRepository(deps.db);
+    let persistedCoreUrl = deps.config.coreUrl;
+    try {
+        persistedCoreUrl = coreConnection.get().baseUrl;
+    }
+    catch (error) {
+        let databaseAvailable = true;
+        try {
+            deps.db.prepare('SELECT 1 AS probe').get();
+        }
+        catch {
+            databaseAvailable = false;
+        }
+        if (databaseAvailable)
+            throw error;
+        // Keep the health endpoint constructible when the database itself is unavailable.
+        persistedCoreUrl = deps.config.coreUrl;
+    }
+    deps.config.coreUrl = persistedCoreUrl;
+    const coreClient = deps.coreClient ?? new CoreClient(persistedCoreUrl);
+    coreClient.setBaseUrl(persistedCoreUrl);
+    if (!deps.providers)
+        registerBuiltInProviders(providers, deps.providerOptions);
+    const responseSessions = deps.responseSessions ?? new ResponseSessionRepository(deps.db);
+    const replayBuffer = deps.replayBuffer ?? new ReplayBuffer();
+    const idempotency = deps.idempotency ?? new IdempotencyService(deps.db, deps.runs, replayBuffer);
+    const responseWorkspaces = deps.responseWorkspaces ?? new WorkspaceManager(deps.config.paths.workspacesDir, {
+        getFixedWorkspaces: () => deps.targets.list()
+            .flatMap((target) => target.fixedWorkspace === null ? [] : [target.fixedWorkspace]),
+    });
+    const providerWorkspaces = responseWorkspaces instanceof WorkspaceManager
+        ? responseWorkspaces
+        : new WorkspaceManager(deps.config.paths.workspacesDir, {
+            getFixedWorkspaces: () => deps.targets.list()
+                .flatMap((target) => target.fixedWorkspace === null ? [] : [target.fixedWorkspace]),
+        });
+    const capabilityService = deps.capabilityService
+        ?? new CapabilityService(providers, deps.targets, providerWorkspaces);
+    const invocationService = deps.invocationService ?? new InvocationService(providers, new TargetScheduler(), providerWorkspaces, deps.targets, deps.runs);
+    const retention = deps.retention ?? (deps.db.raw
+        ? new RetentionService(deps.db, responseSessions, {
+            cleanupForRetention(paths) {
+                if (!responseWorkspaces.cleanupForRetention) {
+                    throw new Error('retention_workspace_cleanup_unsupported');
+                }
+                return responseWorkspaces.cleanupForRetention(paths);
+            },
+        })
+        : undefined);
+    const extensionRegistry = new GatewayExtensionRegistry({
+        app,
+        credentials: deps.credentials,
+        extensions: deps.extensions,
+        grants: deps.grants,
+        targets: deps.targets,
+        idempotency,
+        invocationService,
+        runs: deps.runs,
+        responseSessions,
+        responseWorkspaces,
+    });
+    let serviceShutdownFailure;
+    app.addHook('preClose', async () => {
+        try {
+            await closeServicesInOrder([
+                () => invocationService.abortActive?.(),
+                () => providers.dispose(),
+                () => retention?.stop(),
+                () => extensionRegistry.stop(),
+            ]);
+        }
+        catch (error) {
+            serviceShutdownFailure = { error };
+        }
+    });
+    // Fastify does not propagate preClose failures, so relay only the captured error after drain.
+    app.addHook('onClose', async () => {
+        if (serviceShutdownFailure)
+            throw serviceShutdownFailure.error;
+    });
+    extensionRegistry.register(openAIExtension);
+    if (retention) {
+        app.addHook('onReady', async () => {
+            await retention.reconcileStartup();
+            await retention.sweep();
+            retention.start();
+        });
+    }
+    if (deps.scanCapabilitiesOnReady) {
+        app.addHook('onReady', async () => {
+            await capabilityService.scanInstalled();
+        });
+    }
+    app.addHook('onReady', () => extensionRegistry.start());
+    app.get('/health', async (_request, reply) => {
+        try {
+            deps.db.prepare('SELECT 1 AS probe').get();
+            return reply.send({ ok: true, version: '0.1.0', db_ok: true, core_url: deps.config.coreUrl });
+        }
+        catch {
+            return reply.code(503).send({ ok: false, version: '0.1.0', db_ok: false, core_url: deps.config.coreUrl });
+        }
+    });
+    registerAdminRoutes(app, {
+        config: deps.config,
+        db: deps.db,
+        clients: deps.clients,
+        coreClient,
+        coreConnection,
+        credentials: deps.credentials,
+        targets: deps.targets,
+        grants: deps.grants,
+        extensions: deps.extensions,
+        runs: deps.runs,
+        adminAuth: deps.adminAuth,
+        trustedOrigins: trustedAdminOrigins,
+        capabilityService,
+        runCanceller: invocationService.cancel
+            ? { cancel: (runId) => invocationService.cancel(runId) }
+            : undefined,
+        extensionManifests: [{ ...openAIExtension.manifest, endpoint: '/v1' }],
+        extensionHealth: () => extensionRegistry.health(),
+    });
+    registerCoreRoutes(app, {
+        client: coreClient,
+        connection: coreConnection,
+        adminAuth: deps.adminAuth,
+        webUiAuth: deps.config.webUiAuth,
+        gatewayOrigin,
+        eventProxyOptions: deps.coreEventProxyOptions,
+    });
+    registerUiRoutes(app);
+    return app;
+}
+async function closeServicesInOrder(operations) {
+    const errors = [];
+    for (const operation of operations) {
+        try {
+            await operation();
+        }
+        catch (error) {
+            errors.push(error);
+        }
+    }
+    if (errors.length === 1)
+        throw errors[0];
+    if (errors.length > 1)
+        throw new AggregateError(errors, 'Gateway service shutdown failed');
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAwB,MAAM,SAAS,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAsB,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAGtD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAK/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAA2B,MAAM,+BAA+B,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,uCAAuC,CAAC;AAGlF,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EACL,wBAAwB,GAEzB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAEpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AA8BlD,MAAM,UAAU,eAAe,CAAC,IAA4B;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACvC,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,UAAU,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACxF,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAChF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,gBAAgB,EAAE,CAAC;IAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpF,IAAI,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,iBAAiB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAwB,mBAAmB,CAAC,CAAC,GAAG,EAAE,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;QACD,IAAI,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACnC,kFAAkF;QAClF,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,gBAAgB,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACvE,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,wBAAwB,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/E,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,YAAY,EAAE,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACjG,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,IAAI,IAAI,gBAAgB,CACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAC/B;QACE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;aAC1C,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;KACtF,CACF,CAAC;IACF,MAAM,kBAAkB,GAAG,kBAAkB,YAAY,gBAAgB;QACvE,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;YACtD,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;iBAC1C,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;SACtF,CAAC,CAAC;IACL,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB;WAC3C,IAAI,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACxE,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,IAAI,iBAAiB,CACvE,SAAS,EACT,IAAI,eAAe,EAAE,EACrB,kBAAkB,EAClB,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,IAAI,CACV,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG;QAC9C,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE;YAChD,mBAAmB,CAAC,KAAK;gBACvB,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAC7D,CAAC;gBACD,OAAO,kBAAkB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACvD,CAAC;SACF,CAAC;QACF,CAAC,CAAC,SAAS,CAAC,CAAC;IAEf,MAAM,iBAAiB,GAAG,IAAI,wBAAwB,CAAC;QACrD,GAAG;QACH,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW;QACX,iBAAiB;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,gBAAgB;QAChB,kBAAkB;KACnB,CAAC,CAAC;IACH,IAAI,sBAAsD,CAAC;IAC3D,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,oBAAoB,CAAC;gBACzB,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE;gBACvC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE;gBACzB,GAAG,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE;gBACvB,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sBAAsB,GAAG,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,8FAA8F;IAC9F,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAChC,IAAI,sBAAsB;YAAE,MAAM,sBAAsB,CAAC,KAAK,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,iBAAiB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC5C,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACnC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YACxB,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,iBAAiB,CAAC,aAAa,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC;IAExD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,OAAO,CAAwB,mBAAmB,CAAC,CAAC,GAAG,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mBAAmB,CAAC,GAAG,EAAE;QACvB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU;QACV,cAAc;QACd,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,cAAc,EAAE,mBAAmB;QACnC,iBAAiB;QACjB,YAAY,EAAE,iBAAiB,CAAC,MAAM;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAO,CAAC,KAAK,CAAC,EAAE;YACzD,CAAC,CAAC,SAAS;QACb,kBAAkB,EAAE,CAAC,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACtE,eAAe,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE;KAClD,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,EAAE;QACtB,MAAM,EAAE,UAAU;QAClB,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;QAChC,aAAa;QACb,iBAAiB,EAAE,IAAI,CAAC,qBAAqB;KAC9C,CAAC,CAAC;IACH,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,UAA6C;IAE7C,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;AAC7F,CAAC"}

package/dist/server/auth-hooks.js

@@ -0,0 +1,43 @@
+const SESSION_COOKIE = 'asq_gateway_admin';
+const SAFE_METHODS = new Set(['GET', 'HEAD', 'OPTIONS']);
+export const VITE_DEV_ORIGIN = 'http://127.0.0.1:28773';
+const COOKIE_ONLY_SSE_ROUTE = '/admin/core/events';
+export function sessionCookie(cookieHeader) {
+    if (!cookieHeader)
+        return undefined;
+    const values = [];
+    for (const part of cookieHeader.split(';')) {
+        const separator = part.indexOf('=');
+        if (separator < 0 || part.slice(0, separator).trim() !== SESSION_COOKIE)
+            continue;
+        values.push(part.slice(separator + 1).trim());
+    }
+    return values.length === 1 ? values[0] : undefined;
+}
+function sendAuthError(reply, status, code, message) {
+    reply.code(status).send({ error: { code, message } });
+}
+export function requireAdmin(adminAuth, configuredOrigins, enabled = true) {
+    const trustedOrigins = typeof configuredOrigins === 'string'
+        ? new Set([configuredOrigins, VITE_DEV_ORIGIN])
+        : configuredOrigins;
+    return async function adminGuard(request, reply) {
+        if (!enabled)
+            return;
+        const token = sessionCookie(request.headers.cookie);
+        if (!token || !adminAuth.verifySession(token)) {
+            sendAuthError(reply, 401, 'admin_session_required', 'admin session required');
+            return;
+        }
+        if (request.method === 'GET' && request.routeOptions.url === COOKIE_ONLY_SSE_ROUTE)
+            return;
+        const origin = request.headers.origin;
+        const csrfToken = request.headers['x-csrf-token'];
+        if (typeof csrfToken !== 'string'
+            || !adminAuth.verifySession(token, csrfToken)
+            || (!SAFE_METHODS.has(request.method) && !trustedOrigins.has(origin ?? ''))) {
+            sendAuthError(reply, 403, 'csrf_invalid', 'CSRF validation failed');
+        }
+    };
+}
+//# sourceMappingURL=auth-hooks.js.map

package/dist/server/auth-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-hooks.js","sourceRoot":"","sources":["../../src/server/auth-hooks.ts"],"names":[],"mappings":"AAGA,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACxD,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAEnD,MAAM,UAAU,aAAa,CAAC,YAAgC;IAC5D,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAEpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,cAAc;YAAE,SAAS;QAClF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CACpB,KAAmB,EACnB,MAAiB,EACjB,IAA+C,EAC/C,OAAe;IAEf,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,SAA2B,EAC3B,iBAA+C,EAC/C,OAAO,GAAG,IAAI;IAEd,MAAM,cAAc,GAAG,OAAO,iBAAiB,KAAK,QAAQ;QAC1D,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;QAC/C,CAAC,CAAC,iBAAiB,CAAC;IAEtB,OAAO,KAAK,UAAU,UAAU,CAAC,OAAuB,EAAE,KAAmB;QAC3E,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,wBAAwB,EAAE,wBAAwB,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,GAAG,KAAK,qBAAqB;YAAE,OAAO;QAE3F,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClD,IAAI,OAAO,SAAS,KAAK,QAAQ;eAC5B,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC;eAC1C,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9E,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,wBAAwB,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/core-routes.js

@@ -0,0 +1,127 @@
+import { z, ZodError } from 'zod';
+import { CoreClientError } from '../core-client/client.js';
+import { proxyCoreEvents } from '../core-client/event-proxy.js';
+import { requireAdmin } from './auth-hooks.js';
+import { GatewayError } from './errors.js';
+const noStore = { 'cache-control': 'no-store' };
+const idParams = z.object({ id: z.string().min(1) }).strict();
+const choiceParams = z.object({ id: z.string().min(1), choiceId: z.string().min(1) }).strict();
+const pendingQuery = z.object({ status: z.literal('pending') }).strict();
+const resolveBody = z.object({ selected: z.string().min(1), rationale: z.string().optional() }).strict();
+export function registerCoreRoutes(app, deps) {
+    const requireAuthenticatedAdmin = requireAdmin(deps.adminAuth, deps.gatewayOrigin, deps.webUiAuth === 'token');
+    const connection = () => {
+        deps.connection.update(deps.client.baseUrl);
+        return deps.connection;
+    };
+    app.get('/admin/core/health', { preHandler: requireAuthenticatedAdmin }, async (_request, reply) => {
+        const repository = connection();
+        try {
+            const health = await deps.client.health();
+            return reply.headers(noStore).send({ ...health, connection: repository.markHealth(health) });
+        }
+        catch (error) {
+            repository.markHealth(undefined);
+            throw asGatewayError(error);
+        }
+    });
+    app.get('/admin/core/sessions', { preHandler: requireAuthenticatedAdmin }, async (_request, reply) => {
+        connection();
+        try {
+            return reply.headers(noStore).send({ sessions: await deps.client.listSessions() });
+        }
+        catch (error) {
+            throw asGatewayError(error);
+        }
+    });
+    app.get('/admin/core/sessions/:id/debug', { preHandler: requireAuthenticatedAdmin }, async (request, reply) => {
+        connection();
+        const { id } = parse(idParams, request.params, 'request path');
+        try {
+            return reply.headers(noStore).send(await deps.client.getSessionDebug(id));
+        }
+        catch (error) {
+            throw asGatewayError(error);
+        }
+    });
+    app.get('/admin/core/choices', { preHandler: requireAuthenticatedAdmin }, async (request, reply) => {
+        connection();
+        parse(pendingQuery, request.query, 'request query');
+        try {
+            const sessions = await deps.client.listSessions();
+            const perSession = await mapConcurrent(sessions, 4, (session) => deps.client.listChoices(session.id));
+            const choices = perSession.flat().filter((choice) => choice.status === 'pending_main_agent');
+            return reply.headers(noStore).send({ choices });
+        }
+        catch (error) {
+            throw asGatewayError(error);
+        }
+    });
+    app.get('/admin/core/events', { preHandler: requireAuthenticatedAdmin }, async (request, reply) => {
+        await proxyCoreEvents(request, reply, deps.client, connection(), deps.eventProxyOptions);
+    });
+    app.post('/admin/core/sessions/:id/choices/:choiceId/resolve', { preHandler: requireAuthenticatedAdmin }, async (request, reply) => {
+        connection();
+        const { id, choiceId } = parse(choiceParams, request.params, 'request path');
+        const input = parse(resolveBody, request.body ?? {}, 'request body');
+        try {
+            const choices = await deps.client.listChoices(id);
+            const choice = choices.find((candidate) => candidate.id === choiceId);
+            assertPending(choice);
+            if (!choice.options.some((option) => option.id === input.selected)) {
+                throw new GatewayError(400, 'core_choice_option_invalid', 'selected option is invalid');
+            }
+            await deps.client.resolveChoice(id, choiceId, input.selected, input.rationale);
+            const liveChoices = await deps.client.listChoices(id);
+            const resolvedChoice = liveChoices.find((candidate) => candidate.id === choiceId);
+            assertApplied(resolvedChoice, input.selected, input.rationale);
+            return reply.code(204).send();
+        }
+        catch (error) {
+            if (error instanceof GatewayError)
+                throw error;
+            throw asGatewayError(error);
+        }
+    });
+}
+function assertPending(choice) {
+    if (!choice || choice.status !== 'pending_main_agent') {
+        throw new GatewayError(409, 'core_choice_not_pending', 'Core choice is not pending');
+    }
+}
+function assertApplied(choice, selected, rationale) {
+    if (!choice
+        || choice.status !== 'resolved'
+        || choice.selected !== selected
+        || (rationale !== undefined && choice.rationale !== rationale)) {
+        throw new GatewayError(409, 'core_choice_not_pending', 'Core choice is not pending');
+    }
+}
+function parse(schema, value, label) {
+    try {
+        return schema.parse(value);
+    }
+    catch (error) {
+        if (error instanceof ZodError)
+            throw new GatewayError(400, 'validation_error', `invalid ${label}`);
+        throw error;
+    }
+}
+function asGatewayError(error) {
+    if (error instanceof CoreClientError)
+        return new GatewayError(error.status, error.code, error.message);
+    return new GatewayError(500, 'internal_error', 'internal gateway error');
+}
+async function mapConcurrent(values, concurrency, operation) {
+    const results = new Array(values.length);
+    let next = 0;
+    await Promise.all(Array.from({ length: Math.min(concurrency, values.length) }, async () => {
+        while (next < values.length) {
+            const index = next;
+            next += 1;
+            results[index] = await operation(values[index]);
+        }
+    }));
+    return results;
+}
+//# sourceMappingURL=core-routes.js.map

package/dist/server/core-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-routes.js","sourceRoot":"","sources":["../../src/server/core-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAgB,MAAM,KAAK,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAmB,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAA8B,MAAM,+BAA+B,CAAC;AAI5F,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,OAAO,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;AAChD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/F,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAWzG,MAAM,UAAU,kBAAkB,CAAC,GAAoB,EAAE,IAA2B;IAClF,MAAM,yBAAyB,GAAG,YAAY,CAC5C,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,SAAS,KAAK,OAAO,CAC3B,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACjG,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QACnG,UAAU,EAAE,CAAC;QACb,IAAI,CAAC;YACH,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5G,UAAU,EAAE,CAAC;QACb,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjG,UAAU,EAAE,CAAC;QACb,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACtG,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,oBAAoB,CAAC,CAAC;YAC7F,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAChG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,oDAAoD,EAAE,EAAE,UAAU,EAAE,yBAAyB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACjI,UAAU,EAAE,CAAC;QACb,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YACtE,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,4BAA4B,EAAE,4BAA4B,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,cAAc,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;YAClF,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY;gBAAE,MAAM,KAAK,CAAC;YAC/C,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAA8B;IACnD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACtD,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,yBAAyB,EAAE,4BAA4B,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA8B,EAAE,QAAgB,EAAE,SAAkB;IACzF,IAAI,CAAC,MAAM;WACN,MAAM,CAAC,MAAM,KAAK,UAAU;WAC5B,MAAM,CAAC,QAAQ,KAAK,QAAQ;WAC5B,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,yBAAyB,EAAE,4BAA4B,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAoB,MAAS,EAAE,KAAc,EAAE,KAAa;IACxE,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,kBAAkB,EAAE,WAAW,KAAK,EAAE,CAAC,CAAC;QACnG,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,YAAY,eAAe;QAAE,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACvG,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;AAC3E,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAoB,EACpB,WAAmB,EACnB,SAAmC;IAEnC,MAAM,OAAO,GAAG,IAAI,KAAK,CAAI,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QACxF,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC;YACnB,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC,CAAC;IACJ,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server/errors.js

@@ -0,0 +1,19 @@
+export class GatewayError extends Error {
+    status;
+    code;
+    constructor(status, code, message) {
+        super(message);
+        this.status = status;
+        this.code = code;
+    }
+    toBody() {
+        return { error: { code: this.code, message: this.message } };
+    }
+}
+export function sendGatewayError(reply, error) {
+    const value = error instanceof GatewayError
+        ? error
+        : new GatewayError(500, 'internal_error', 'internal gateway error');
+    return reply.code(value.status).send(value.toBody());
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,YAAa,SAAQ,KAAK;IAChB;IAAyB;IAA9C,YAAqB,MAAc,EAAW,IAAY,EAAE,OAAe;QACzE,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAQ;IAE1D,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,KAAc;IAClE,MAAM,KAAK,GAAG,KAAK,YAAY,YAAY;QACzC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/server/ui-routes.js

@@ -0,0 +1,77 @@
+import { existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { basename, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fastifyStatic from '@fastify/static';
+const defaultRoot = fileURLToPath(new URL('../../dist/web', import.meta.url));
+const immutableAsset = /-[A-Za-z0-9_-]{8,}\.[^/]+$/;
+const reservedPrefixes = ['/admin', '/v1', '/health', '/assets'];
+function requestPath(request) {
+    return request.url.split('?', 1)[0] ?? '/';
+}
+function acceptsHtml(request) {
+    const accept = request.headers.accept;
+    if (typeof accept !== 'string')
+        return false;
+    let htmlAccepted = false;
+    for (const entry of accept.split(',')) {
+        const [rawMediaType, ...parameters] = entry.split(';');
+        const mediaType = rawMediaType?.trim().toLowerCase();
+        let quality = 1;
+        for (const parameter of parameters) {
+            const [rawName, rawValue] = parameter.split('=', 2);
+            if (rawName?.trim().toLowerCase() !== 'q')
+                continue;
+            const value = rawValue?.trim() ?? '';
+            quality = /^(?:0(?:\.\d{0,3})?|1(?:\.0{0,3})?)$/.test(value)
+                ? Number(value)
+                : 0;
+            break;
+        }
+        if (quality === 0)
+            continue;
+        if (mediaType === 'text/event-stream'
+            || mediaType === 'application/json'
+            || mediaType?.endsWith('+json'))
+            return false;
+        if (mediaType === 'text/html' || mediaType === 'application/xhtml+xml') {
+            htmlAccepted = true;
+        }
+    }
+    return htmlAccepted;
+}
+function ownsSpaPath(request) {
+    const path = requestPath(request);
+    return request.method === 'GET'
+        && acceptsHtml(request)
+        && !reservedPrefixes.some((prefix) => path.startsWith(prefix));
+}
+export function registerUiRoutes(app, options = {}) {
+    const root = options.root ?? defaultRoot;
+    const indexPath = join(root, 'index.html');
+    const assetsRoot = join(root, 'assets');
+    if (!existsSync(indexPath) || !existsSync(assetsRoot))
+        return;
+    app.register(fastifyStatic, {
+        root: assetsRoot,
+        prefix: '/assets/',
+        decorateReply: false,
+        cacheControl: false,
+        setHeaders(response, filePath) {
+            response.setHeader('cache-control', immutableAsset.test(basename(filePath))
+                ? 'public, max-age=31536000, immutable'
+                : 'no-cache');
+        },
+    });
+    app.setNotFoundHandler(async (request, reply) => {
+        if (!ownsSpaPath(request)) {
+            return reply.code(404).send({ error: { code: 'not_found', message: 'route not found' } });
+        }
+        const indexHtml = await readFile(indexPath, 'utf8');
+        return reply
+            .type('text/html; charset=utf-8')
+            .header('cache-control', 'no-cache')
+            .send(indexHtml);
+    });
+}
+//# sourceMappingURL=ui-routes.js.map

package/dist/server/ui-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-routes.js","sourceRoot":"","sources":["../../src/server/ui-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAO5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9E,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAEjE,SAAS,WAAW,CAAC,OAAuB;IAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,YAAY,EAAE,GAAG,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,YAAY,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACpD,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG;gBAAE,SAAS;YACpD,MAAM,KAAK,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACrC,OAAO,GAAG,sCAAsC,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC1D,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC,CAAC;YACN,MAAM;QACR,CAAC;QACD,IAAI,OAAO,KAAK,CAAC;YAAE,SAAS;QAC5B,IAAI,SAAS,KAAK,mBAAmB;eAChC,SAAS,KAAK,kBAAkB;eAChC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,uBAAuB,EAAE,CAAC;YACvE,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK;WAC1B,WAAW,CAAC,OAAO,CAAC;WACpB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAoB,EAAE,UAA0B,EAAE;IACjF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO;IAE9D,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;QAC1B,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,UAAU;QAClB,aAAa,EAAE,KAAK;QACpB,YAAY,EAAE,KAAK;QACnB,UAAU,CAAC,QAAQ,EAAE,QAAQ;YAC3B,QAAQ,CAAC,SAAS,CAChB,eAAe,EACf,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACrC,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,UAAU,CACf,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAE,EAAE;QAC5E,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO,KAAK;aACT,IAAI,CAAC,0BAA0B,CAAC;aAChC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;aACnC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC"}