@jmanuelcorral/openteam 0.1.30 → 0.1.31

package/dist/cli/consoleServe.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consoleServe.d.ts","sourceRoot":"","sources":["../../src/cli/consoleServe.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvE,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACtD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACtD,oEAAoE;IACpE,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,yDAAyD;IACzD,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;IAC1D,oDAAoD;IACpD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;IAClD,yDAAyD;IACzD,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,kBAAkB,KACrB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,sEAAsE;IACtE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf,CAMA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAwE7B"}
+{"version":3,"file":"consoleServe.d.ts","sourceRoot":"","sources":["../../src/cli/consoleServe.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,KAAK,aAAa,EAEnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGvE,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACtD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACtD,oEAAoE;IACpE,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,yDAAyD;IACzD,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;IAC1D,oDAAoD;IACpD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;IAClD,yDAAyD;IACzD,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,kBAAkB,KACrB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9C,sEAAsE;IACtE,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG;IAC9D,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf,CAMA;AAED,MAAM,MAAM,kBAAkB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,gBAAgB,EACtB,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CA+F7B"}

package/dist/cli.js

@@ -1271,6 +1271,7 @@ var ConsoleConfigSchema = z3.object({
   refreshMs: z3.number().int().min(250).default(2000),
   recentRoutes: z3.number().int().positive().default(50),
   openBrowser: z3.boolean().default(false),
+  remoteStorage: z3.boolean().default(false),
   terminal: z3.object({
     enabled: z3.boolean().default(true),
     pty: z3.boolean().optional()
@@ -1282,6 +1283,7 @@ var ConsoleConfigSchema = z3.object({
   refreshMs: 2000,
   recentRoutes: 50,
   openBrowser: false,
+  remoteStorage: false,
   terminal: { enabled: true }
 });
 var defaultLocalModel = {
@@ -2053,13 +2055,177 @@ async function handleConsoleRoute(request, response, url, deps) {
   return true;
 }
 
+// src/web/storageRoute.ts
+var JSON_HEADERS2 = { "content-type": "application/json" };
+var READ_OPS = new Set(["read", "exists", "list", "isDirectory", "stat"]);
+var WRITE_OPS = new Set(["write", "append", "mkdir", "delete"]);
+function bearerFromHeader2(request) {
+  const header = request.headers.authorization;
+  if (typeof header !== "string" || !header.startsWith("Bearer ")) {
+    return;
+  }
+  const value = header.slice("Bearer ".length).trim();
+  return value.length === 0 ? undefined : value;
+}
+function authorized2(request, query, token) {
+  const provided = tokenFromQuery(query) ?? bearerFromHeader2(request);
+  return provided !== undefined && safeEqualToken(provided, token);
+}
+function pathAllowed(path, allowPrefixes) {
+  if (allowPrefixes === undefined) {
+    return true;
+  }
+  return allowPrefixes.some((rawPrefix) => {
+    const prefix = normalizeVirtualPath(rawPrefix);
+    if (prefix === "") {
+      return true;
+    }
+    return path === prefix || path.startsWith(`${prefix}/`);
+  });
+}
+async function readJsonBody2(request, limit) {
+  return new Promise((resolve) => {
+    let raw = "";
+    let aborted = false;
+    request.on("data", (chunk) => {
+      if (aborted) {
+        return;
+      }
+      raw += chunk.toString("utf8");
+      if (raw.length > limit) {
+        aborted = true;
+        resolve(undefined);
+      }
+    });
+    request.on("end", () => {
+      if (!aborted) {
+        try {
+          resolve(JSON.parse(raw));
+        } catch {
+          resolve(undefined);
+        }
+      }
+    });
+    request.on("error", () => resolve(undefined));
+  });
+}
+function sendJson(response, status, body) {
+  response.writeHead(status, JSON_HEADERS2).end(JSON.stringify(body));
+}
+async function handleRead(response, op, path, storage) {
+  if (op === "read") {
+    sendJson(response, 200, { content: await storage.read(path) ?? null });
+    return;
+  }
+  if (op === "list") {
+    sendJson(response, 200, { entries: await storage.list(path) });
+    return;
+  }
+  if (op === "exists") {
+    sendJson(response, 200, { value: await storage.exists(path) });
+    return;
+  }
+  if (op === "isDirectory") {
+    sendJson(response, 200, { value: await storage.isDirectory(path) });
+    return;
+  }
+  sendJson(response, 200, { stat: await storage.stat(path) ?? null });
+}
+async function handleWrite(request, response, op, deps) {
+  if (deps.readOnly === true) {
+    sendJson(response, 403, { error: "read-only" });
+    return;
+  }
+  const body = await readJsonBody2(request, 8 * 1024 * 1024);
+  const record = typeof body === "object" && body !== null ? body : undefined;
+  const rawPath = record?.path;
+  if (typeof rawPath !== "string") {
+    sendJson(response, 400, { error: "invalid path" });
+    return;
+  }
+  let path;
+  try {
+    path = normalizeVirtualPath(rawPath);
+  } catch (error) {
+    if (error instanceof StoragePathError) {
+      sendJson(response, 400, { error: "invalid path" });
+      return;
+    }
+    throw error;
+  }
+  if (!pathAllowed(path, deps.allowPrefixes)) {
+    sendJson(response, 403, { error: "path not allowed" });
+    return;
+  }
+  if (op === "write" || op === "append") {
+    const content = record?.content;
+    if (typeof content !== "string") {
+      sendJson(response, 400, { error: "invalid content" });
+      return;
+    }
+    if (op === "write") {
+      await deps.storage.write(path, content);
+    } else {
+      await deps.storage.append(path, content);
+    }
+  } else if (op === "mkdir") {
+    await deps.storage.mkdir(path);
+  } else {
+    await deps.storage.delete(path);
+  }
+  sendJson(response, 200, { ok: true });
+}
+async function handleStorageRoute(request, response, url, deps) {
+  if (!url.pathname.startsWith("/storage/")) {
+    return false;
+  }
+  const op = url.pathname.slice("/storage/".length);
+  if (!READ_OPS.has(op) && !WRITE_OPS.has(op)) {
+    sendJson(response, 404, { error: "not found" });
+    return true;
+  }
+  if (!authorized2(request, url.searchParams, deps.token)) {
+    sendJson(response, 401, { error: "unauthorized" });
+    return true;
+  }
+  if (READ_OPS.has(op)) {
+    if (request.method !== "GET") {
+      sendJson(response, 405, { error: "method not allowed" });
+      return true;
+    }
+    const rawPath = url.searchParams.get("path") ?? "";
+    let path;
+    try {
+      path = normalizeVirtualPath(rawPath);
+    } catch (error) {
+      if (error instanceof StoragePathError) {
+        sendJson(response, 400, { error: "invalid path" });
+        return true;
+      }
+      throw error;
+    }
+    if (!pathAllowed(path, deps.allowPrefixes)) {
+      sendJson(response, 403, { error: "path not allowed" });
+      return true;
+    }
+    await handleRead(response, op, path, deps.storage);
+    return true;
+  }
+  if (request.method !== "POST") {
+    sendJson(response, 405, { error: "method not allowed" });
+    return true;
+  }
+  await handleWrite(request, response, op, deps);
+  return true;
+}
+
 // src/web/server.ts
 var SSE_HEADERS2 = {
   "content-type": "text/event-stream",
   "cache-control": "no-cache",
   connection: "keep-alive"
 };
-var JSON_HEADERS2 = { "content-type": "application/json" };
+var JSON_HEADERS3 = { "content-type": "application/json" };
 var HTML_HEADERS = { "content-type": "text/html; charset=utf-8" };
 function isAddressInUse(error) {
   return typeof error === "object" && error !== null && "code" in error && error.code === "EADDRINUSE";
@@ -2123,6 +2289,9 @@ async function createConsoleServer(deps) {
     if (consoleDeps !== undefined && await handleConsoleRoute(request, response, url2, consoleDeps)) {
       return;
     }
+    if (deps.storageApi !== undefined && await handleStorageRoute(request, response, url2, deps.storageApi)) {
+      return;
+    }
     if (request.method !== "GET") {
       response.writeHead(405).end("method not allowed");
       return;
@@ -2133,11 +2302,11 @@ async function createConsoleServer(deps) {
       return;
     }
     if (path === "/api/state") {
-      response.writeHead(200, JSON_HEADERS2).end(await stateJson(deps));
+      response.writeHead(200, JSON_HEADERS3).end(await stateJson(deps));
       return;
     }
     if (path === "/healthz") {
-      response.writeHead(200, JSON_HEADERS2).end(JSON.stringify({ ok: true }));
+      response.writeHead(200, JSON_HEADERS3).end(JSON.stringify({ ok: true }));
       return;
     }
     if (path === "/favicon.ico") {
@@ -2518,7 +2687,8 @@ async function createConsoleRuntime(deps) {
     readSnapshot,
     config: deps.config,
     ...deps.log !== undefined ? { log: deps.log } : {},
-    ...deps.console !== undefined ? { console: deps.console } : {}
+    ...deps.console !== undefined ? { console: deps.console } : {},
+    ...deps.storageApi !== undefined ? { storageApi: deps.storageApi } : {}
   });
   const watchFn = deps.watch ?? ((path, listener) => fsWatch(path, { persistent: false }, listener));
   const watcher = watchSources([deps.sessionsDir, decisionsPath, backlogPath, deps.agentDir], () => {
@@ -2576,6 +2746,20 @@ async function runConsoleServe(deps, options) {
         createClient: makeClient,
         createPtyClient: makePtyClient
       },
+      ...config.console.remoteStorage ? {
+        storageApi: {
+          storage: deps.storage,
+          token,
+          readOnly: true,
+          allowPrefixes: [
+            deps.sessionsDir,
+            deps.decisionsPath,
+            deps.backlogPath,
+            deps.agentDir,
+            ...deps.legacyTelemetryPath !== undefined ? [deps.legacyTelemetryPath] : []
+          ]
+        }
+      } : {},
       log: deps.log
     });
   } catch (error) {
@@ -2584,6 +2768,9 @@ async function runConsoleServe(deps, options) {
     return { exitCode: 1 };
   }
   deps.log("Escuchando en loopback. Pulsa Ctrl+C para parar.");
+  if (config.console.remoteStorage) {
+    deps.log("Storage remoto expuesto en /storage/* (read-only, requiere token).");
+  }
   if (options.open && deps.openBrowser !== undefined) {
     try {
       await deps.openBrowser(runtime.url);

package/dist/config/schema.d.ts

@@ -31,6 +31,7 @@ export declare const ConsoleConfigSchema: z.ZodDefault<z.ZodObject<{
     refreshMs: z.ZodDefault<z.ZodNumber>;
     recentRoutes: z.ZodDefault<z.ZodNumber>;
     openBrowser: z.ZodDefault<z.ZodBoolean>;
+    remoteStorage: z.ZodDefault<z.ZodBoolean>;
     terminal: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         pty: z.ZodOptional<z.ZodBoolean>;
@@ -123,6 +124,7 @@ export declare const OpenTeamConfigObjectSchema: z.ZodObject<{
         refreshMs: z.ZodDefault<z.ZodNumber>;
         recentRoutes: z.ZodDefault<z.ZodNumber>;
         openBrowser: z.ZodDefault<z.ZodBoolean>;
+        remoteStorage: z.ZodDefault<z.ZodBoolean>;
         terminal: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             pty: z.ZodOptional<z.ZodBoolean>;
@@ -199,6 +201,7 @@ export declare const OpenTeamConfigSchema: z.ZodObject<{
         refreshMs: z.ZodDefault<z.ZodNumber>;
         recentRoutes: z.ZodDefault<z.ZodNumber>;
         openBrowser: z.ZodDefault<z.ZodBoolean>;
+        remoteStorage: z.ZodDefault<z.ZodBoolean>;
         terminal: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
             pty: z.ZodOptional<z.ZodBoolean>;

package/dist/config/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;EAA6C,CAAC;AAC3E,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAC;AACH,eAAO,MAAM,kBAAkB;;;EAA6B,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;EAAqC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;kBA4B5B,CAAC;AAeL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAM7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2DrC,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA6B,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;EAA6C,CAAC;AAC3E,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAC;AACH,eAAO,MAAM,kBAAkB;;;EAA6B,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;EAAqC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;kBAmC5B,CAAC;AAeL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAM7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2DrC,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA6B,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/index.js

@@ -341,6 +341,7 @@ var ConsoleConfigSchema = z.object({
   refreshMs: z.number().int().min(250).default(2000),
   recentRoutes: z.number().int().positive().default(50),
   openBrowser: z.boolean().default(false),
+  remoteStorage: z.boolean().default(false),
   terminal: z.object({
     enabled: z.boolean().default(true),
     pty: z.boolean().optional()
@@ -352,6 +353,7 @@ var ConsoleConfigSchema = z.object({
   refreshMs: 2000,
   recentRoutes: 50,
   openBrowser: false,
+  remoteStorage: false,
   terminal: { enabled: true }
 });
 var defaultLocalModel = {

package/dist/storage/httpStorageProvider.d.ts

@@ -0,0 +1,21 @@
+import type { StorageProvider } from "./provider";
+/**
+ * `createHttpStorageProvider` — adapter remoto del `StorageProvider` (§ Fase 4).
+ *
+ * Habla con el endpoint `/storage/...` servido por la Console (ver
+ * `web/storageRoute.ts`) para leer/escribir el estado del equipo a través del
+ * tunnel. Es un proxy transparente del contrato: cada operación se traduce a una
+ * petición HTTP autenticada con el token efímero de la Console.
+ *
+ * `fetch` es inyectable para tests deterministas; en producción usa el global.
+ */
+export type HttpStorageProviderOptions = {
+    /** Origen del endpoint, p. ej. `http://127.0.0.1:4599`. Sin barra final. */
+    baseUrl: string;
+    /** Token efímero de la Console (bearer). */
+    token: string;
+    /** Implementación de `fetch` (inyectable). Por defecto el global. */
+    fetch?: typeof fetch;
+};
+export declare function createHttpStorageProvider(options: HttpStorageProviderOptions): StorageProvider;
+//# sourceMappingURL=httpStorageProvider.d.ts.map

package/dist/storage/httpStorageProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpStorageProvider.d.ts","sourceRoot":"","sources":["../../src/storage/httpStorageProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,YAAY,CAAC;AAE/D;;;;;;;;;GASG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC;AAOF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,0BAA0B,GAClC,eAAe,CA2CjB"}

package/dist/web/server.d.ts

@@ -3,6 +3,7 @@ import type { ConsoleConfig } from "../config/schema";
 import type { ConsoleClient } from "../console/opencodeClient";
 import type { PtyClient } from "../console/pty";
 import type { ConsoleInputs } from "../console/state";
+import { type StorageRouteDeps } from "./storageRoute";
 export type ConsoleServerDeps = {
     /** Relee las fuentes y produce los inputs crudos del console. */
     readSnapshot: () => Promise<ConsoleInputs>;
@@ -20,6 +21,11 @@ export type ConsoleServerDeps = {
         createClient: (endpoint: string) => ConsoleClient;
         createPtyClient?: (endpoint: string) => PtyClient;
     };
+    /**
+     * Endpoint remoto de storage (`/storage/*`). Opcional y opt-in: expone el
+     * estado del equipo autenticado con token para una Console remota vía tunnel.
+     */
+    storageApi?: StorageRouteDeps;
 };
 export type ConsoleServer = {
     url: string;

package/dist/web/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,gBAAgB,EAIjC,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAatD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iEAAiE;IACjE,YAAY,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,EAAE,OAAO,CAAC;QACzB,+DAA+D;QAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;QAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;KACnD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AA2DF;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CA4HxB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/web/server.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,IAAI,gBAAgB,EAIjC,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAW3E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,iEAAiE;IACjE,YAAY,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3C,MAAM,EAAE,aAAa,CAAC;IACtB,2EAA2E;IAC3E,YAAY,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,8EAA8E;IAC9E,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,EAAE,OAAO,CAAC;QACzB,+DAA+D;QAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;QAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;KACnD,CAAC;IACF;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AA2DF;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,aAAa,CAAC,CAmIxB"}

package/dist/web/start.d.ts

@@ -5,6 +5,7 @@ import type { ConsoleClient } from "../console/opencodeClient";
 import type { PtyClient } from "../console/pty";
 import type { CommitView } from "../console/types";
 import type { StorageProvider } from "../storage/provider";
+import type { StorageRouteDeps } from "./storageRoute";
 export type ConsoleRuntimeDeps = {
     config: ConsoleConfig;
     /** Directorio de logs de sesión (`sessions/*.jsonl`). */
@@ -31,6 +32,8 @@ export type ConsoleRuntimeDeps = {
         createClient: (endpoint: string) => ConsoleClient;
         createPtyClient?: (endpoint: string) => PtyClient;
     };
+    /** Endpoint remoto de storage (`/storage/*`). Opcional y opt-in. */
+    storageApi?: StorageRouteDeps;
     /** Inyectables para tests. */
     serve?: typeof import("./server").createConsoleServer;
     watch?: (path: string, listener: () => void) => ReturnType<typeof fsWatch>;

package/dist/web/start.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/web/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,OAAO,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAM3D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACtD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,sEAAsE;IACtE,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,EAAE,OAAO,CAAC;QACzB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;QAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;KACnD,CAAC;IACF,8BAA8B;IAC9B,KAAK,CAAC,EAAE,cAAc,UAAU,EAAE,mBAAmB,CAAC;IACtD,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IAC3E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,cAAc,CAAC,CAEzB"}
+{"version":3,"file":"start.d.ts","sourceRoot":"","sources":["../../src/web/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,OAAO,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAI3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qEAAqE;IACrE,OAAO,EAAE,eAAe,CAAC;IACzB,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACtD,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,sEAAsE;IACtE,OAAO,CAAC,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,EAAE,OAAO,CAAC;QACzB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC;QAClD,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS,CAAC;KACnD,CAAC;IACF,oEAAoE;IACpE,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,8BAA8B;IAC9B,KAAK,CAAC,EAAE,cAAc,UAAU,EAAE,mBAAmB,CAAC;IACtD,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,UAAU,CAAC,OAAO,OAAO,CAAC,CAAC;IAC3E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,cAAc,CAAC,CAEzB"}

package/dist/web/storageRoute.d.ts

@@ -0,0 +1,36 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { StorageProvider } from "../storage/provider";
+/**
+ * Endpoint HTTP que expone un `StorageProvider` sobre la red (§ Fase 4). Permite
+ * que una Console/sesión remota lea el estado del equipo a través del tunnel ya
+ * existente, reutilizando el token efímero de la Console.
+ *
+ * Seguridad:
+ * - Exige el token (bearer `Authorization` o `?token=`), como el resto de la
+ *   Console. Sin token válido → 401.
+ * - `readOnly` (por defecto activo cuando se expone remoto) rechaza cualquier
+ *   mutación (`write`/`append`/`mkdir`/`delete`) con 403.
+ * - `allowPrefixes` restringe las rutas accesibles a un allowlist normalizado;
+ *   fuera de él → 403. Así solo se expone lo pactado (sessions/decisions/backlog/
+ *   agentes), nunca ficheros arbitrarios del disco.
+ *
+ * El storage de openteam solo contiene telemetría hasheada y artefactos Markdown
+ * del equipo: nunca prompts crudos ni PII.
+ */
+export type StorageRouteDeps = {
+    storage: StorageProvider;
+    token: string;
+    /** Si es `true`, rechaza toda mutación con 403. Por defecto `false`. */
+    readOnly?: boolean;
+    /**
+     * Allowlist de prefijos virtuales accesibles. Si es `undefined`, se permite
+     * cualquier ruta (útil en tests). En producción se acota al estado del equipo.
+     */
+    allowPrefixes?: readonly string[];
+};
+/**
+ * Enruta las peticiones de `/storage/...`. Devuelve `true` si la petición fue
+ * atendida (y respondida), `false` para que el servidor siga con sus rutas.
+ */
+export declare function handleStorageRoute(request: IncomingMessage, response: ServerResponse, url: URL, deps: StorageRouteDeps): Promise<boolean>;
+//# sourceMappingURL=storageRoute.d.ts.map

package/dist/web/storageRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storageRoute.d.ts","sourceRoot":"","sources":["../../src/web/storageRoute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC,CAAC;AAgKF;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,GAAG,EACR,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,OAAO,CAAC,CA4ClB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jmanuelcorral/openteam",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "description": "Plugin opencode de routing coste-consciente local-first con orquestación Squad.",
   "license": "MIT",
   "author": "Jose Manuel Corral",