@jini-ai/http-kit 0.2.1

package/dist/db-ops.d.ts

@@ -0,0 +1,116 @@
+import type { Express } from 'express';
+import type { Principal, ToolPolicy, ToolRegistration } from '@jini-ai/core';
+import type { ToolExecutor } from '@jini-ai/daemon';
+import { type AdapterContext } from './adapter.js';
+/** The `ToolRegistry` id `GET /api/daemon/db` executes through. */
+export declare const DB_INSPECT_TOOL_ID = "daemon.db.inspect";
+/** The `ToolRegistry` id `POST /api/daemon/db/verify` executes through. */
+export declare const DB_VERIFY_TOOL_ID = "daemon.db.verify";
+/** The `ToolRegistry` id `POST /api/daemon/db/vacuum` executes through. */
+export declare const DB_VACUUM_TOOL_ID = "daemon.db.vacuum";
+export interface DaemonDbTableInfo {
+    readonly name: string;
+    readonly rowCount: number;
+}
+/** Structurally identical to `@jini-ai/sqlite`'s `DaemonDbStatusReport` — defined locally so this package incurs no `better-sqlite3` dependency. */
+export interface DaemonDbStatusReport {
+    readonly kind: 'sqlite' | 'postgres';
+    readonly location: string;
+    readonly sizeBytes: number;
+    readonly schemaVersion: number | null;
+    readonly tables: readonly DaemonDbTableInfo[];
+    readonly generatedAt: number;
+}
+export type DbIntegrityIssueKind = 'integrity' | 'foreign_key';
+export interface DbIntegrityIssue {
+    readonly kind: DbIntegrityIssueKind;
+    readonly message: string;
+}
+/** Structurally identical to `@jini-ai/sqlite`'s `DbIntegrityReport`. */
+export interface DbIntegrityReport {
+    readonly ok: boolean;
+    readonly mode: 'integrity_check' | 'quick_check';
+    readonly issues: readonly DbIntegrityIssue[];
+    readonly elapsedMs: number;
+    readonly generatedAt: number;
+}
+export interface DaemonDbVacuumResult {
+    readonly ok: true;
+    readonly beforeBytes: number;
+    readonly afterBytes: number;
+    readonly reclaimedBytes: number;
+    readonly elapsedMs: number;
+}
+/** The real collaborator a host injects — typically backed by `@jini-ai/sqlite`'s `inspectSqliteDatabase`/`verifySqliteIntegrity` plus a small `vacuum` wrapper around `db.exec('VACUUM')`. */
+export interface DaemonDbOperations {
+    inspect(): Promise<DaemonDbStatusReport> | DaemonDbStatusReport;
+    verify(quick: boolean): Promise<DbIntegrityReport> | DbIntegrityReport;
+    vacuum(): Promise<DaemonDbVacuumResult> | DaemonDbVacuumResult;
+}
+/**
+ * Deny-by-default `ToolPolicy` shared by all three DB tools — every call is
+ * denied, unconditionally, regardless of principal. Matching
+ * `@jini-ai/deploy`'s `denyAllDeployPublishPolicy` precedent: a host must
+ * explicitly opt in with its own policy (e.g. role-gated, or "same principal
+ * that owns the daemon process") rather than getting a working DB inspector
+ * for free merely by registering the tools. `inspect`/`verify` disclose
+ * internal schema and row-count information; `vacuum` rewrites the database
+ * file in place — none of the three has a safe "mostly harmless" default the
+ * way a pure read-only, non-sensitive tool might.
+ */
+export declare const denyAllDaemonDbPolicy: ToolPolicy;
+export interface CreateDaemonDbToolRegistrationsOptions {
+    readonly operations: DaemonDbOperations;
+    /** Defaults to {@link denyAllDaemonDbPolicy} — see its doc for why a permissive default was rejected. Applies to all three tools; pass distinct `ToolRegistration.policy` values by registering them individually if a host wants per-operation rules. */
+    readonly policy?: ToolPolicy;
+    readonly requiresConfirmation?: boolean;
+    readonly timeoutMs?: number;
+}
+export interface DaemonDbToolRegistrations {
+    readonly inspect: ToolRegistration;
+    readonly verify: ToolRegistration;
+    readonly vacuum: ToolRegistration;
+}
+/**
+ * Builds the three `{descriptor, handler, policy}` triples a host registers
+ * against `@jini-ai/core`'s `ToolRegistry` so the DB operations become
+ * reachable only via `ToolExecutor.execute(principal, run, toolId, input)` —
+ * never by a route calling `operations.inspect()`/`verify()`/`vacuum()`
+ * directly, which would bypass authorization and the audit trail entirely.
+ *
+ * @complexity O(1) to build the three registrations; each handler's own cost is `operations`'s.
+ * @overallScore 100/100
+ */
+export declare function createDaemonDbToolRegistrations(options: CreateDaemonDbToolRegistrationsOptions): DaemonDbToolRegistrations;
+/** Diagnostic detail for an internal-error response the public API deliberately does not disclose (SEC-005, matching `runs.ts`'s `RunInternalErrorContext`): a `failed`/`timed-out`/`cancelled` tool execution can embed schema names, file paths, or a raw SQLite error message. */
+export interface DaemonDbInternalErrorContext {
+    readonly source: 'db-inspect' | 'db-verify' | 'db-vacuum';
+    readonly correlationId: string;
+    readonly error: unknown;
+}
+export interface DaemonDbHttpDeps {
+    readonly toolExecutor: ToolExecutor;
+    /**
+     * The identity these routes execute tool calls as. A fixed, host-supplied
+     * value rather than derived per-request — this transport has no session/
+     * identity subsystem of its own (see `packages/http/source-map.md`'s
+     * `ExecutionDelegate` design-decision note); a host that needs per-request
+     * principals should resolve one from its own auth layer and construct
+     * `DaemonDbHttpDeps` per request, or supply a `ToolPolicy` that inspects
+     * something other than `Principal` to make its decision.
+     */
+    readonly principal: Principal;
+    /** Host-owned sink for the real exception behind a generic `INTERNAL_ERROR` response (SEC-005). Defaults to `console.error`. */
+    readonly onInternalError?: (context: DaemonDbInternalErrorContext) => void;
+}
+/** `GET /api/daemon/db` — the database inventory (schema version, tables, row counts, size). */
+export declare const daemonDbInspectRoute: import("./types.js").JsonRouteSpec<void, DaemonDbStatusReport, DaemonDbHttpDeps>;
+/** `POST /api/daemon/db/verify?quick=` — `PRAGMA integrity_check`/`quick_check` plus `foreign_key_check`. */
+export declare const daemonDbVerifyRoute: import("./types.js").JsonRouteSpec<{
+    quick: boolean;
+}, DbIntegrityReport, DaemonDbHttpDeps>;
+/** `POST /api/daemon/db/vacuum` — runs `VACUUM` and reports bytes reclaimed. */
+export declare const daemonDbVacuumRoute: import("./types.js").JsonRouteSpec<void, DaemonDbVacuumResult, DaemonDbHttpDeps>;
+/** Mounts all three DB-ops routes on `app`. A pack's `http(app, services)` calls this directly. */
+export declare function registerDaemonDbRoutes(app: Express, deps: DaemonDbHttpDeps, adapter: AdapterContext): void;
+//# sourceMappingURL=db-ops.d.ts.map

package/dist/db-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-ops.d.ts","sourceRoot":"","sources":["../src/db-ops.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAU,UAAU,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrF,OAAO,KAAK,EAAuB,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EAAmC,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAIpF,mEAAmE;AACnE,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AACpD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,oJAAoJ;AACpJ,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,+LAA+L;AAC/L,MAAM,WAAW,kBAAkB;IACjC,OAAO,IAAI,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;IAChE,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG,iBAAiB,CAAC;IACvE,MAAM,IAAI,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;CAChE;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,UAEnC,CAAC;AAEF,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;IACxC,0PAA0P;IAC1P,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAMD;;;;;;;;;GASG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,sCAAsC,GAC9C,yBAAyB,CAuC3B;AAED,qRAAqR;AACrR,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,WAAW,CAAC;IAC1D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAOD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,gIAAgI;IAChI,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,IAAI,CAAC;CAC5E;AA8BD,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,kFAS/B,CAAC;AAYH,6GAA6G;AAC7G,eAAO,MAAM,mBAAmB;WAA4B,OAAO;uCASjE,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,kFAS9B,CAAC;AAEH,mGAAmG;AACnG,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAI1G"}

package/dist/db-ops.js

@@ -0,0 +1,191 @@
+/**
+ * @module db-ops
+ *
+ * Daemon DB inspect/verify/vacuum operations, wired through the
+ * tool-execution boundary (`@jini-ai/core`'s `tool-registry.ts` + `@jini-ai/daemon`'s
+ * `tool-executor.ts`) rather than called directly from a route handler.
+ * Ported from OD's `apps/daemon/src/routes/daemon.ts` `GET /api/daemon/db`,
+ * `POST /api/daemon/db/verify`, `POST /api/daemon/db/vacuum` (see
+ * `source-map.md`'s routes-classification table, row `#12 daemon.ts`: "generic
+ * in shape but depend on a separate `storage/db-inspect.ts` port not built
+ * this round" — that port now exists as `@jini-ai/sqlite`'s `db-inspect.ts`).
+ *
+ * This module does **not** depend on `@jini-ai/sqlite` or `better-sqlite3` at
+ * all: `DaemonDbOperations` is a plain injected interface (structurally
+ * compatible with `@jini-ai/sqlite`'s `inspectSqliteDatabase`/
+ * `verifySqliteIntegrity` return shapes, so a caller can wire those in with
+ * zero adapter code) — the same "caller supplies the real collaborator"
+ * convention `daemon-status.ts`/`host-tools.ts` already established in this
+ * package.
+ *
+ * **Why the tool-execution boundary, not a plain route handler calling
+ * `DaemonDbOperations` directly:** these three operations reveal internal
+ * schema/row-count/file-size information (`inspect`/`verify`) and rewrite the
+ * database file in place (`vacuum`) — real security stakes the task brief
+ * that added this module named explicitly. OD's own origin gated only
+ * `verify`/`vacuum` behind `requireLocalDaemonRequest` and left `GET
+ * /api/daemon/db` completely ungated — a real pre-existing gap, not carried
+ * forward here. Per this repo's binding tool-execution-boundary precedent
+ * (`packages/deploy/src/tool.ts`'s `deploy.publish`, `packages/daemon/src/
+ * delegated-tool-bridge.ts`), the actual work happens only inside a
+ * `ToolHandler` `ToolExecutor.execute` invokes after `ToolPolicy.authorize`
+ * allows it — never directly from `registerDaemonDbRoutes`' handlers. All
+ * three routes also keep `requireSameOrigin: true` as a first line of
+ * defense (matching `daemon-status.ts`'s shutdown route), but that transport
+ * gate is defense in depth, not a substitute for the tool-execution
+ * boundary — see {@link denyAllDaemonDbPolicy}'s doc for why the default
+ * policy denies every call rather than allowing one.
+ */
+import { randomUUID } from 'node:crypto';
+import { createApiError } from '@jini-ai/protocol';
+import { defineJsonRoute, mountJsonRoute } from './adapter.js';
+import { validationError } from './request.js';
+import { err, ok } from './types.js';
+/** The `ToolRegistry` id `GET /api/daemon/db` executes through. */
+export const DB_INSPECT_TOOL_ID = 'daemon.db.inspect';
+/** The `ToolRegistry` id `POST /api/daemon/db/verify` executes through. */
+export const DB_VERIFY_TOOL_ID = 'daemon.db.verify';
+/** The `ToolRegistry` id `POST /api/daemon/db/vacuum` executes through. */
+export const DB_VACUUM_TOOL_ID = 'daemon.db.vacuum';
+/**
+ * Deny-by-default `ToolPolicy` shared by all three DB tools — every call is
+ * denied, unconditionally, regardless of principal. Matching
+ * `@jini-ai/deploy`'s `denyAllDeployPublishPolicy` precedent: a host must
+ * explicitly opt in with its own policy (e.g. role-gated, or "same principal
+ * that owns the daemon process") rather than getting a working DB inspector
+ * for free merely by registering the tools. `inspect`/`verify` disclose
+ * internal schema and row-count information; `vacuum` rewrites the database
+ * file in place — none of the three has a safe "mostly harmless" default the
+ * way a pure read-only, non-sensitive tool might.
+ */
+export const denyAllDaemonDbPolicy = {
+    authorize: () => 'deny',
+};
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * Builds the three `{descriptor, handler, policy}` triples a host registers
+ * against `@jini-ai/core`'s `ToolRegistry` so the DB operations become
+ * reachable only via `ToolExecutor.execute(principal, run, toolId, input)` —
+ * never by a route calling `operations.inspect()`/`verify()`/`vacuum()`
+ * directly, which would bypass authorization and the audit trail entirely.
+ *
+ * @complexity O(1) to build the three registrations; each handler's own cost is `operations`'s.
+ * @overallScore 100/100
+ */
+export function createDaemonDbToolRegistrations(options) {
+    const { operations, policy = denyAllDaemonDbPolicy, requiresConfirmation, timeoutMs } = options;
+    const descriptorExtras = {
+        ...(requiresConfirmation !== undefined ? { requiresConfirmation } : {}),
+        ...(timeoutMs !== undefined ? { timeoutMs } : {}),
+    };
+    return {
+        inspect: {
+            descriptor: {
+                id: DB_INSPECT_TOOL_ID,
+                description: 'Inspects the daemon SQLite database: schema version, table list, row counts, on-disk size.',
+                ...descriptorExtras,
+            },
+            policy,
+            handler: async () => operations.inspect(),
+        },
+        verify: {
+            descriptor: {
+                id: DB_VERIFY_TOOL_ID,
+                description: 'Runs a SQLite integrity/foreign-key check against the daemon database.',
+                ...descriptorExtras,
+            },
+            policy,
+            handler: async (ctx) => {
+                const input = isRecord(ctx.input) ? ctx.input : {};
+                return operations.verify(input.quick === true);
+            },
+        },
+        vacuum: {
+            descriptor: {
+                id: DB_VACUUM_TOOL_ID,
+                description: 'Runs SQLite VACUUM against the daemon database and reports reclaimed bytes.',
+                ...descriptorExtras,
+            },
+            policy,
+            handler: async () => operations.vacuum(),
+        },
+    };
+}
+function defaultDaemonDbInternalErrorSink(context) {
+    // eslint-disable-next-line no-console
+    console.error(`[@jini-ai/http-kit] internal error (${context.source}, correlationId=${context.correlationId})`, context.error);
+}
+/** Every DB-ops call gets its own opaque, single-use `RunRef` — these are one-off operations requests, not steps of a longer-lived agent run, so there is no real run to attach the audit trail to. */
+function freshRun() {
+    return { id: randomUUID() };
+}
+function toolResultToApiResult(deps, source, result) {
+    switch (result.status) {
+        case 'completed':
+            return ok(result.output);
+        case 'denied':
+            return err(createApiError('TOOL_OPERATION_DENIED', 'this operation was denied by policy'));
+        case 'confirmation-denied':
+            return err(createApiError('TOOL_OPERATION_DENIED', 'this operation was denied during confirmation'));
+        case 'timed-out':
+        case 'cancelled':
+        case 'failed': {
+            const correlationId = randomUUID();
+            const sink = deps.onInternalError ?? defaultDaemonDbInternalErrorSink;
+            sink({ source, correlationId, error: result.status === 'failed' ? result.error : result.status });
+            return err(createApiError('INTERNAL_ERROR', 'an internal error occurred', { requestId: correlationId }));
+        }
+    }
+}
+/** `GET /api/daemon/db` — the database inventory (schema version, tables, row counts, size). */
+export const daemonDbInspectRoute = defineJsonRoute({
+    method: 'get',
+    path: '/api/daemon/db',
+    requireSameOrigin: true,
+    parse: () => ok(undefined),
+    handle: async (_input, deps) => {
+        const result = await deps.toolExecutor.execute(deps.principal, freshRun(), DB_INSPECT_TOOL_ID, undefined);
+        return toolResultToApiResult(deps, 'db-inspect', result);
+    },
+});
+function parseDbVerifyInput(input) {
+    const raw = input.query.quick;
+    if (raw === undefined)
+        return ok({ quick: false });
+    if (typeof raw !== 'string') {
+        return err(validationError('quick must be a single query-string value when provided'));
+    }
+    const normalized = raw.toLowerCase();
+    return ok({ quick: normalized === '1' || normalized === 'true' });
+}
+/** `POST /api/daemon/db/verify?quick=` — `PRAGMA integrity_check`/`quick_check` plus `foreign_key_check`. */
+export const daemonDbVerifyRoute = defineJsonRoute({
+    method: 'post',
+    path: '/api/daemon/db/verify',
+    requireSameOrigin: true,
+    parse: parseDbVerifyInput,
+    handle: async (input, deps) => {
+        const result = await deps.toolExecutor.execute(deps.principal, freshRun(), DB_VERIFY_TOOL_ID, input);
+        return toolResultToApiResult(deps, 'db-verify', result);
+    },
+});
+/** `POST /api/daemon/db/vacuum` — runs `VACUUM` and reports bytes reclaimed. */
+export const daemonDbVacuumRoute = defineJsonRoute({
+    method: 'post',
+    path: '/api/daemon/db/vacuum',
+    requireSameOrigin: true,
+    parse: () => ok(undefined),
+    handle: async (_input, deps) => {
+        const result = await deps.toolExecutor.execute(deps.principal, freshRun(), DB_VACUUM_TOOL_ID, undefined);
+        return toolResultToApiResult(deps, 'db-vacuum', result);
+    },
+});
+/** Mounts all three DB-ops routes on `app`. A pack's `http(app, services)` calls this directly. */
+export function registerDaemonDbRoutes(app, deps, adapter) {
+    mountJsonRoute(app, daemonDbInspectRoute, deps, adapter);
+    mountJsonRoute(app, daemonDbVerifyRoute, deps, adapter);
+    mountJsonRoute(app, daemonDbVacuumRoute, deps, adapter);
+}
+//# sourceMappingURL=db-ops.js.map

package/dist/db-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db-ops.js","sourceRoot":"","sources":["../src/db-ops.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAuB,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAuC,MAAM,YAAY,CAAC;AAE1E,mEAAmE;AACnE,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AACtD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AACpD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAgDpD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAe;IAC/C,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM;CACxB,CAAC;AAgBF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAA+C;IAE/C,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,qBAAqB,EAAE,oBAAoB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAChG,MAAM,gBAAgB,GAAG;QACvB,GAAG,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;IAEF,OAAO;QACL,OAAO,EAAE;YACP,UAAU,EAAE;gBACV,EAAE,EAAE,kBAAkB;gBACtB,WAAW,EAAE,4FAA4F;gBACzG,GAAG,gBAAgB;aACpB;YACD,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE;SAC1C;QACD,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,EAAE,EAAE,iBAAiB;gBACrB,WAAW,EAAE,wEAAwE;gBACrF,GAAG,gBAAgB;aACpB;YACD,MAAM;YACN,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;YACjD,CAAC;SACF;QACD,MAAM,EAAE;YACN,UAAU,EAAE;gBACV,EAAE,EAAE,iBAAiB;gBACrB,WAAW,EAAE,6EAA6E;gBAC1F,GAAG,gBAAgB;aACpB;YACD,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE;SACzC;KACF,CAAC;AACJ,CAAC;AASD,SAAS,gCAAgC,CAAC,OAAqC;IAC7E,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,uCAAuC,OAAO,CAAC,MAAM,mBAAmB,OAAO,CAAC,aAAa,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AACjI,CAAC;AAkBD,uMAAuM;AACvM,SAAS,QAAQ;IACf,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAsB,EACtB,MAA8C,EAC9C,MAA2B;IAE3B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,EAAE,CAAC,MAAM,CAAC,MAAW,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC,cAAc,CAAC,uBAAuB,EAAE,qCAAqC,CAAC,CAAC,CAAC;QAC7F,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC,cAAc,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,CAAC,CAAC;QACvG,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,IAAI,gCAAgC,CAAC;YACtE,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAClG,OAAO,GAAG,CAAC,cAAc,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAA+C;IAChG,MAAM,EAAE,KAAK;IACb,IAAI,EAAE,gBAAgB;IACtB,iBAAiB,EAAE,IAAI;IACvB,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;QAC1G,OAAO,qBAAqB,CAAuB,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,KAAwB;IAClD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,eAAe,CAAC,yDAAyD,CAAC,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAA0D;IAC1G,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,uBAAuB;IAC7B,iBAAiB,EAAE,IAAI;IACvB,KAAK,EAAE,kBAAkB;IACzB,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACrG,OAAO,qBAAqB,CAAoB,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;CACF,CAAC,CAAC;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAA+C;IAC/F,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,uBAAuB;IAC7B,iBAAiB,EAAE,IAAI;IACvB,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;QACzG,OAAO,qBAAqB,CAAuB,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC;CACF,CAAC,CAAC;AAEH,mGAAmG;AACnG,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,IAAsB,EAAE,OAAuB;IAClG,cAAc,CAAC,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACzD,cAAc,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,cAAc,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC"}

package/dist/delegated-tools.d.ts

@@ -0,0 +1,46 @@
+import type { Express } from 'express';
+import type { Principal } from '@jini-ai/core';
+import { type RunLifecycle, type ToolExecutionResult, type ToolExecutor } from '@jini-ai/daemon';
+import { type AdapterContext } from './adapter.js';
+export interface DelegatedToolExecuteRequest {
+    readonly runId: string;
+    readonly toolUseId: string;
+    readonly toolId: string;
+    readonly input?: unknown;
+}
+export interface DelegatedToolExecuteResponse {
+    readonly result: ToolExecutionResult;
+}
+/**
+ * Diagnostic detail for an internal-error response the public API deliberately does not
+ * disclose (SEC-005), matching `runs.ts`'s `RunInternalErrorContext` precedent: a thrown
+ * `ToolExecutor`/registry failure can embed tool-handler internals no HTTP caller should see.
+ */
+export interface DelegatedToolsInternalErrorContext {
+    readonly source: 'delegated-tool-execute' | 'resolve-principal';
+    readonly runId: string;
+    readonly toolId: string;
+    readonly correlationId: string;
+    readonly error: unknown;
+}
+export interface DelegatedToolsHttpDeps {
+    readonly lifecycle: RunLifecycle;
+    readonly toolExecutor: ToolExecutor;
+    /** Host-owned: resolves the `Principal` a given delegated-tool-call request executes as. Mandatory — see module doc; there is no safe default identity this package could assume on a host's behalf. */
+    readonly resolvePrincipal: (request: DelegatedToolExecuteRequest) => Principal | Promise<Principal>;
+    /** Host-owned sink for the real exception behind a generic `INTERNAL_ERROR` response (SEC-005). Defaults to `console.error`. */
+    readonly onInternalError?: (context: DelegatedToolsInternalErrorContext) => void;
+}
+/**
+ * `POST /api/delegated-tool-calls` — executes one delegated tool call against an already-started
+ * run. Maps `ToolExecutionResult.status` to the HTTP response via `toolExecutionResultToApiResult`
+ * above — mirroring `db-ops.ts`'s precedent for the identical status union rather than treating
+ * every business outcome as a `200`. A genuinely unexpected throw (an unregistered `toolId` — a
+ * routing/programming error per `ToolExecutor.execute`'s own contract — or a race where the run
+ * became terminal between this route's existence check and the bridge's first emitted event)
+ * reaches the same SEC-005 redaction path.
+ */
+export declare const delegatedToolExecuteRoute: import("./types.js").JsonRouteSpec<DelegatedToolExecuteRequest, DelegatedToolExecuteResponse, DelegatedToolsHttpDeps>;
+/** Mounts `POST /api/delegated-tool-calls` on `app`. A pack's `http(app, services)` calls this directly. */
+export declare function registerDelegatedToolRoutes(app: Express, deps: DelegatedToolsHttpDeps, adapter: AdapterContext): void;
+//# sourceMappingURL=delegated-tools.d.ts.map

package/dist/delegated-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-tools.d.ts","sourceRoot":"","sources":["../src/delegated-tools.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAA6B,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC5H,OAAO,EAAmC,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAIpF,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,GAAG,mBAAmB,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,wMAAwM;IACxM,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACpG,gIAAgI;IAChI,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,kCAAkC,KAAK,IAAI,CAAC;CAClF;AAyFD;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,uHAyCpC,CAAC;AAEH,4GAA4G;AAC5G,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAErH"}

package/dist/delegated-tools.js

@@ -0,0 +1,155 @@
+/**
+ * @module delegated-tools
+ *
+ * `POST /api/delegated-tool-calls` — the daemon-side half of gap 3's MCP-callback continuation
+ * transport spike (see `packages/daemon/source-map.md`'s "run/chat orchestration gap 3, part 1"
+ * addition and this package's own dated section in `source-map.md`). The swarm-consensus Final
+ * Recommendation asked for exactly this round trip: "inject the already-shipped MCP host into
+ * one MCP-capable CLI's launch config, prove a tool round-trip through the existing
+ * `delegated-tool-bridge.ts`." This route is that round trip's daemon-side half — an MCP server
+ * subprocess spawned alongside a `claude` run (`packages/mcp/src/bin/serve.ts`, injected via
+ * `packages/daemon/src/agent-executor.ts`'s optional `mcpJsonInjection` config) calls back into
+ * the daemon over loopback HTTP (`packages/mcp/src/server/daemon-client.ts`) with
+ * `{runId, toolUseId, toolId, input}`; this route decodes that request and calls the
+ * already-shipped, already-tested `createDelegatedToolBridge`
+ * (`packages/daemon/src/delegated-tool-bridge.ts`), which is the ONLY execution path from here:
+ * every injected byte still routes through `ToolExecutor`'s deny-by-default gate — no parallel
+ * authorization mechanism is introduced by this route.
+ *
+ * `resolvePrincipal` is host-owned and has no default (mirrors gap 3's own resolved
+ * human-in-the-loop answer — an explicit host-supplied allowlist/policy, never an invented
+ * mechanism): whatever `Principal` a host resolves for a given delegated-tool-call request is
+ * exactly what flows into `ToolExecutor.execute`'s own `ToolPolicy.authorize`/
+ * `ExecutionDelegate` gates. This route does not itself decide who is allowed to do what — it
+ * only decides *which run* a request may act against (an unknown or not-yet-started `runId` is
+ * rejected with `404` before the bridge is ever invoked, same precedent as `runs.ts`'s
+ * `runCancelRoute`).
+ */
+import { randomUUID } from 'node:crypto';
+import { createApiError } from '@jini-ai/protocol';
+import { createDelegatedToolBridge } from '@jini-ai/daemon';
+import { defineJsonRoute, mountJsonRoute } from './adapter.js';
+import { validationError } from './request.js';
+import { err, ok } from './types.js';
+/** Logs the real failure server-side and returns the generic, correlation-id-bearing public error (SEC-005: never the raw exception). */
+function defaultInternalErrorSink(context) {
+    // eslint-disable-next-line no-console
+    console.error(`[@jini-ai/http-kit] internal error (${context.source}, correlationId=${context.correlationId})`, context.error);
+}
+function reportInternalError(deps, source, error, runId, toolId) {
+    const correlationId = randomUUID();
+    const sink = deps.onInternalError ?? defaultInternalErrorSink;
+    sink({ source, runId, toolId, correlationId, error });
+    return createApiError('INTERNAL_ERROR', 'an internal error occurred', { requestId: correlationId });
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function requireNonEmptyString(body, key) {
+    const value = body[key];
+    return typeof value === 'string' && value.trim().length > 0 ? value : undefined;
+}
+function parseDelegatedToolExecute(input) {
+    if (!isRecord(input.body))
+        return err(validationError('body must be a JSON object'));
+    const runId = requireNonEmptyString(input.body, 'runId');
+    if (runId === undefined) {
+        return err(validationError('runId must be a non-empty string', [{ path: 'runId', message: 'required non-empty string' }]));
+    }
+    const toolUseId = requireNonEmptyString(input.body, 'toolUseId');
+    if (toolUseId === undefined) {
+        return err(validationError('toolUseId must be a non-empty string', [{ path: 'toolUseId', message: 'required non-empty string' }]));
+    }
+    const toolId = requireNonEmptyString(input.body, 'toolId');
+    if (toolId === undefined) {
+        return err(validationError('toolId must be a non-empty string', [{ path: 'toolId', message: 'required non-empty string' }]));
+    }
+    return ok({ runId, toolUseId, toolId, input: input.body.input });
+}
+/**
+ * Maps a settled `ToolExecutionResult` to the wire `Result` — the same status mapping
+ * `db-ops.ts`'s `toolResultToApiResult` establishes for this identical `ToolExecutionResult`
+ * union, kept consistent here rather than reinvented: `completed` → `200 {result}`,
+ * `denied`/`confirmation-denied` → `403 TOOL_OPERATION_DENIED`, `timed-out`/`cancelled` → a
+ * SEC-005-redacted `500 INTERNAL_ERROR` (the real status/error goes to `onInternalError`, never the
+ * wire).
+ *
+ * `failed` splits in two, on `result.errorKind` (`@jini-ai/daemon`'s `ToolExecutor` sets it from
+ * whether the handler threw `@jini-ai/core`'s `ToolInputError`): `'validation'` means the CALLER's
+ * input was the problem — a wrong/missing/malformed field name, a `themeId` that doesn't exist, a
+ * path escaping its theme — so it is reported as a real `400 BAD_REQUEST` carrying the handler's own
+ * actionable message (the same one a model reads to retry correctly), not redacted. Everything else
+ * (`'internal'`, or no `errorKind` at all — e.g. an older `ToolExecutor` build) stays the SEC-005
+ * redacted 500 path, because a handler that threw for a reason OTHER than "your input was bad" can
+ * embed exactly the kind of internal detail that path exists to keep off the wire.
+ */
+function toolExecutionResultToApiResult(deps, runId, toolId, result) {
+    switch (result.status) {
+        case 'completed':
+            return ok({ result });
+        case 'denied':
+            return err(createApiError('TOOL_OPERATION_DENIED', 'this operation was denied by policy'));
+        case 'confirmation-denied':
+            return err(createApiError('TOOL_OPERATION_DENIED', 'this operation was denied during confirmation'));
+        case 'timed-out':
+        case 'cancelled':
+            return err(reportInternalError(deps, 'delegated-tool-execute', result.status, runId, toolId));
+        case 'failed':
+            if (result.errorKind === 'validation') {
+                return err(createApiError('BAD_REQUEST', result.error ?? 'invalid tool input'));
+            }
+            return err(reportInternalError(deps, 'delegated-tool-execute', result.error ?? result.status, runId, toolId));
+    }
+}
+/**
+ * `POST /api/delegated-tool-calls` — executes one delegated tool call against an already-started
+ * run. Maps `ToolExecutionResult.status` to the HTTP response via `toolExecutionResultToApiResult`
+ * above — mirroring `db-ops.ts`'s precedent for the identical status union rather than treating
+ * every business outcome as a `200`. A genuinely unexpected throw (an unregistered `toolId` — a
+ * routing/programming error per `ToolExecutor.execute`'s own contract — or a race where the run
+ * became terminal between this route's existence check and the bridge's first emitted event)
+ * reaches the same SEC-005 redaction path.
+ */
+export const delegatedToolExecuteRoute = defineJsonRoute({
+    method: 'post',
+    path: '/api/delegated-tool-calls',
+    requireSameOrigin: true,
+    parse: parseDelegatedToolExecute,
+    handle: async (input, deps, signal) => {
+        const run = await deps.lifecycle.get(input.runId);
+        if (run === undefined) {
+            return err(createApiError('NOT_FOUND', `run "${input.runId}" was not found`));
+        }
+        let principal;
+        try {
+            principal = await deps.resolvePrincipal(input);
+        }
+        catch (error) {
+            return err(reportInternalError(deps, 'resolve-principal', error, input.runId, input.toolId));
+        }
+        const bridge = createDelegatedToolBridge({ lifecycle: deps.lifecycle, toolExecutor: deps.toolExecutor });
+        try {
+            // `signal` carries the caller's HTTP connection dropping — see `mountJsonRoute`
+            // (`adapter.ts`). The bridge already combines it with the run's own cancellation
+            // (`DelegatedToolInvocation.signal`'s doc); this is the wire that was missing, not new
+            // behaviour in the bridge or `ToolExecutor`.
+            const result = await bridge.execute({
+                runId: input.runId,
+                toolUseId: input.toolUseId,
+                toolId: input.toolId,
+                principal,
+                input: input.input,
+                ...(signal !== undefined ? { signal } : {}),
+            });
+            return toolExecutionResultToApiResult(deps, input.runId, input.toolId, result);
+        }
+        catch (error) {
+            return err(reportInternalError(deps, 'delegated-tool-execute', error, input.runId, input.toolId));
+        }
+    },
+});
+/** Mounts `POST /api/delegated-tool-calls` on `app`. A pack's `http(app, services)` calls this directly. */
+export function registerDelegatedToolRoutes(app, deps, adapter) {
+    mountJsonRoute(app, delegatedToolExecuteRoute, deps, adapter);
+}
+//# sourceMappingURL=delegated-tools.js.map

package/dist/delegated-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegated-tools.js","sourceRoot":"","sources":["../src/delegated-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,OAAO,EAAE,yBAAyB,EAAkE,MAAM,iBAAiB,CAAC;AAC5H,OAAO,EAAE,eAAe,EAAE,cAAc,EAAuB,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAuC,MAAM,YAAY,CAAC;AAmC1E,yIAAyI;AACzI,SAAS,wBAAwB,CAAC,OAA2C;IAC3E,sCAAsC;IACtC,OAAO,CAAC,KAAK,CAAC,uCAAuC,OAAO,CAAC,MAAM,mBAAmB,OAAO,CAAC,aAAa,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;AACjI,CAAC;AAED,SAAS,mBAAmB,CAC1B,IAA4B,EAC5B,MAAoD,EACpD,KAAc,EACd,KAAa,EACb,MAAc;IAEd,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,IAAI,wBAAwB,CAAC;IAC9D,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,cAAc,CAAC,gBAAgB,EAAE,4BAA4B,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAAC,IAA6B,EAAE,GAAW;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClF,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAwB;IACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAErF,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,GAAG,CAAC,eAAe,CAAC,kCAAkC,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACjE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,eAAe,CAAC,sCAAsC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,eAAe,CAAC,mCAAmC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/H,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,8BAA8B,CACrC,IAA4B,EAC5B,KAAa,EACb,MAAc,EACd,MAA2B;IAE3B,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC,cAAc,CAAC,uBAAuB,EAAE,qCAAqC,CAAC,CAAC,CAAC;QAC7F,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC,cAAc,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,CAAC,CAAC;QACvG,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,wBAAwB,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAChG,KAAK,QAAQ;YACX,IAAI,MAAM,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;gBACtC,OAAO,GAAG,CAAC,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,oBAAoB,CAAC,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,wBAAwB,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClH,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,eAAe,CAItD;IACA,MAAM,EAAE,MAAM;IACd,IAAI,EAAE,2BAA2B;IACjC,iBAAiB,EAAE,IAAI;IACvB,KAAK,EAAE,yBAAyB;IAChC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,cAAc,CAAC,WAAW,EAAE,QAAQ,KAAK,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,SAAoB,CAAC;QACzB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/F,CAAC;QAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC;YACH,gFAAgF;YAChF,iFAAiF;YACjF,uFAAuF;YACvF,6CAA6C;YAC7C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;gBAClC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS;gBACT,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC,CAAC;YACH,OAAO,8BAA8B,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,4GAA4G;AAC5G,MAAM,UAAU,2BAA2B,CAAC,GAAY,EAAE,IAA4B,EAAE,OAAuB;IAC7G,cAAc,CAAC,GAAG,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC"}

package/dist/express/run-stream.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @module express/run-stream
+ *
+ * Express-specific mounting glue for the shared AG-UI SSE run-stream handler (`../run-stream.js`).
+ * Express's `Request`/`Response` already *are* Node's raw `http.IncomingMessage`/
+ * `http.ServerResponse` (Express's `Response` extends `http.ServerResponse` directly), so this
+ * file's only job is resolving `req.params.runId` and handing the request/response straight
+ * through — a few lines, not a reimplementation, per the design decision that motivated building
+ * the SSE primitive once instead of duplicating it per transport.
+ */
+import type { Express } from 'express';
+import { type RunStreamDeps } from '../run-stream.js';
+/** Mounts the AG-UI SSE run-stream route on `app`. A pack's `http(app, services)` calls this directly. */
+export declare function registerRunStreamRoute(app: Express, deps: RunStreamDeps): void;
+//# sourceMappingURL=run-stream.d.ts.map

package/dist/express/run-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../src/express/run-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAiD,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAErG,0GAA0G;AAC1G,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,CAO9E"}

package/dist/express/run-stream.js

@@ -0,0 +1,11 @@
+import { handleRunStreamRequest, RUN_STREAM_ROUTE_PATH } from '../run-stream.js';
+/** Mounts the AG-UI SSE run-stream route on `app`. A pack's `http(app, services)` calls this directly. */
+export function registerRunStreamRoute(app, deps) {
+    app.get(RUN_STREAM_ROUTE_PATH, async (req, res) => {
+        // `:runId` is a required path segment of RUN_STREAM_ROUTE_PATH — this handler is only ever
+        // reached via a URL that already matched it, so the param is always present at runtime even
+        // though @types/express types every param as possibly `undefined` in general.
+        await handleRunStreamRequest(req, res, req.params.runId, deps);
+    });
+}
+//# sourceMappingURL=run-stream.js.map

package/dist/express/run-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-stream.js","sourceRoot":"","sources":["../../src/express/run-stream.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAsB,MAAM,kBAAkB,CAAC;AAErG,0GAA0G;AAC1G,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,IAAmB;IACtE,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACnE,2FAA2F;QAC3F,4FAA4F;QAC5F,8EAA8E;QAC9E,MAAM,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAM,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/express-index.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @module @jini/http/express
+ *
+ * The Express-native transport namespace: re-exports this package's existing flat Express
+ * implementation (request parsing, response serialization, the mounting Adapter, the `/api`
+ * security middleware, the route-registration guard, compat error helpers, the daemon-status
+ * routes, and the runs/agents/host-tools route packs) under one namespace, mirroring
+ * `./fastify/index.js`'s shape so a transport-switchable caller (`@jini/node-host`'s
+ * `createLocalNodeDaemon`) can import either namespace symmetrically. Nothing here is a new
+ * implementation — every export is the same flat file every other consumer of this package
+ * already imports directly from the root barrel; this module exists only so `httpExpress.*` and
+ * `httpFastify.*` read the same at call sites that need to pick a transport explicitly.
+ */
+export type { AdapterContext } from './adapter.js';
+export { defineJsonRoute, mountJsonRoute } from './adapter.js';
+export type { ApiBearerAuthMiddlewareDeps, ApiOriginGuardMiddlewareDeps } from './api-security-middleware.js';
+export { registerApiBearerAuthMiddleware, registerApiOriginGuardMiddleware } from './api-security-middleware.js';
+export { createCompatApiError, createCompatApiErrorResponse, sendApiError as sendCompatApiError, } from './compat.js';
+export type { DaemonShutdownResponse, DaemonStatusDeps, DaemonStatusResponse, } from './daemon-status.js';
+export { daemonShutdownRoute, daemonStatusRoute, registerDaemonStatusRoutes } from './daemon-status.js';
+export { isLoopbackHostname, isLoopbackPeerAddress, localOriginFromHeader, normalizeLocalAuthority, requireLocalDaemonRequest, validateLocalDaemonRequest, } from './local-daemon-request.js';
+export type { OriginContext } from './origin.js';
+export { guardSameOrigin } from './origin.js';
+export { rawInput, validationError } from './request.js';
+export { registerRunStreamRoute } from './express/run-stream.js';
+export { sendApiError, sendJson, statusForError } from './response.js';
+export type { InstallRouteRegistrationGuardOptions, RouteRegistration } from './route-registration-guard.js';
+export { getRouteRegistrationInventory, guardedRouteKey, installRouteRegistrationGuard, } from './route-registration-guard.js';
+export { registerRunRoutes } from './runs.js';
+export { registerAgentRoutes } from './agents.js';
+export { registerHostToolsRoutes } from './host-tools.js';
+//# sourceMappingURL=express-index.d.ts.map

package/dist/express-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"express-index.d.ts","sourceRoot":"","sources":["../src/express-index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE/D,YAAY,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC9G,OAAO,EAAE,+BAA+B,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEjH,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,YAAY,IAAI,kBAAkB,GACnC,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAExG,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEvE,YAAY,EAAE,oCAAoC,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC7G,OAAO,EACL,6BAA6B,EAC7B,eAAe,EACf,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/express-index.js

@@ -0,0 +1,14 @@
+export { defineJsonRoute, mountJsonRoute } from './adapter.js';
+export { registerApiBearerAuthMiddleware, registerApiOriginGuardMiddleware } from './api-security-middleware.js';
+export { createCompatApiError, createCompatApiErrorResponse, sendApiError as sendCompatApiError, } from './compat.js';
+export { daemonShutdownRoute, daemonStatusRoute, registerDaemonStatusRoutes } from './daemon-status.js';
+export { isLoopbackHostname, isLoopbackPeerAddress, localOriginFromHeader, normalizeLocalAuthority, requireLocalDaemonRequest, validateLocalDaemonRequest, } from './local-daemon-request.js';
+export { guardSameOrigin } from './origin.js';
+export { rawInput, validationError } from './request.js';
+export { registerRunStreamRoute } from './express/run-stream.js';
+export { sendApiError, sendJson, statusForError } from './response.js';
+export { getRouteRegistrationInventory, guardedRouteKey, installRouteRegistrationGuard, } from './route-registration-guard.js';
+export { registerRunRoutes } from './runs.js';
+export { registerAgentRoutes } from './agents.js';
+export { registerHostToolsRoutes } from './host-tools.js';
+//# sourceMappingURL=express-index.js.map