@kb-labs/rest-api-app 1.3.0

package/.kb/runtime/workspaces/ws_f0f301b8-388d-4dc4-b301-475f2bc95f02/ws/logs-channel.js

@@ -0,0 +1,133 @@
+import { defineMessage, defineWebSocket, MessageRouter } from '@kb-labs/sdk';
+
+// src/ws/logs-channel.ts
+var SubscribeMsg = defineMessage("subscribe");
+var UnsubscribeMsg = defineMessage("unsubscribe");
+var LogMsg = defineMessage("log");
+var ErrorMsg = defineMessage("error");
+var subscriptions = /* @__PURE__ */ new Map();
+function normalizeLevel(level) {
+  switch (level) {
+    case "trace":
+    case "debug":
+      return "debug";
+    case "info":
+      return "info";
+    case "warn":
+      return "warn";
+    case "error":
+    case "fatal":
+      return "error";
+    default:
+      return "info";
+  }
+}
+function levelMatches(logLevel, filterLevel) {
+  if (!filterLevel || filterLevel === "all") {
+    return true;
+  }
+  const levelOrder = {
+    debug: 0,
+    trace: 0,
+    info: 1,
+    warn: 2,
+    error: 3,
+    fatal: 3
+  };
+  const logPriority = levelOrder[logLevel] ?? 1;
+  const filterPriority = levelOrder[filterLevel] ?? 0;
+  return logPriority >= filterPriority;
+}
+var logs_channel_default = defineWebSocket({
+  path: "/logs/:jobId",
+  description: "Real-time job logs streaming",
+  handler: {
+    async onConnect(ctx, sender) {
+      const connectionId = sender.getConnectionId();
+      ctx.platform.logger.info("[logs-channel] Client connected", { connectionId });
+      const capabilities = ctx.platform.logs.getCapabilities();
+      if (!capabilities.hasStreaming) {
+        await sender.send(
+          ErrorMsg.create({
+            error: "Log streaming not available. Enable logRingBuffer adapter in config."
+          })
+        );
+        sender.close(1011, "Streaming not available");
+      }
+    },
+    async onMessage(ctx, message, sender) {
+      const connectionId = sender.getConnectionId();
+      const router = new MessageRouter().on(SubscribeMsg, async (ctx2, payload, _rawSender) => {
+        const { jobId, level } = payload;
+        ctx2.platform.logger.info("[logs-channel] Subscribing to logs", { connectionId, jobId, level });
+        const existingUnsubscribe = subscriptions.get(connectionId);
+        if (existingUnsubscribe) {
+          existingUnsubscribe();
+        }
+        const filter = {
+          source: jobId
+          // Logs are tagged with jobId as source
+        };
+        const unsubscribe = ctx2.platform.logs.subscribe((log) => {
+          if (!levelMatches(log.level, level)) {
+            return;
+          }
+          const logJobId = log.fields?.jobId ?? log.fields?.runId ?? log.source;
+          if (logJobId !== jobId) {
+            return;
+          }
+          sender.send(
+            LogMsg.create({
+              timestamp: new Date(log.timestamp).toISOString(),
+              level: normalizeLevel(log.level),
+              message: log.message,
+              context: log.fields
+            })
+          ).catch((err) => {
+            ctx2.platform.logger.error("[logs-channel] Failed to send log", err instanceof Error ? err : void 0);
+          });
+        }, filter);
+        subscriptions.set(connectionId, unsubscribe);
+        await sender.send(
+          LogMsg.create({
+            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+            level: "info",
+            message: `Subscribed to logs for job ${jobId} (level: ${level || "all"})`
+          })
+        );
+      }).on(UnsubscribeMsg, async (ctx2, _payload, _rawSender) => {
+        ctx2.platform.logger.info("[logs-channel] Unsubscribing from logs", { connectionId });
+        const unsubscribe = subscriptions.get(connectionId);
+        if (unsubscribe) {
+          unsubscribe();
+          subscriptions.delete(connectionId);
+        }
+        await sender.send(
+          LogMsg.create({
+            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+            level: "info",
+            message: "Unsubscribed from logs"
+          })
+        );
+      });
+      await router.handle(ctx, message, sender.raw);
+    },
+    async onDisconnect(ctx, code, reason) {
+      ctx.platform.logger.info("[logs-channel] Client disconnected", { code, reason });
+    },
+    async onError(ctx, error, sender) {
+      ctx.platform.logger.error("[logs-channel] Error", error);
+      try {
+        await sender.send(ErrorMsg.create({ error: error.message }));
+      } catch (sendError) {
+        ctx.platform.logger.error("[logs-channel] Failed to send error message", sendError instanceof Error ? sendError : void 0);
+      }
+    },
+    cleanup() {
+    }
+  }
+});
+
+export { logs_channel_default as default, levelMatches, normalizeLevel, subscriptions };
+//# sourceMappingURL=logs-channel.js.map
+//# sourceMappingURL=logs-channel.js.map

package/.kb/runtime/workspaces/ws_f0f301b8-388d-4dc4-b301-475f2bc95f02/ws/logs-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/ws/logs-channel.ts"],"names":["ctx"],"mappings":";;;AAYA,IAAM,YAAA,GAAe,cAAiD,WAAW,CAAA;AAEjF,IAAM,cAAA,GAAiB,cAAkB,aAAa,CAAA;AAEtD,IAAM,MAAA,GAAS,cAKZ,KAAK,CAAA;AAER,IAAM,QAAA,GAAW,cAAiC,OAAO,CAAA;AAWzD,IAAM,aAAA,uBAAoB,GAAA;AAK1B,SAAS,eAAe,KAAA,EAAgE;AACtF,EAAA,QAAQ,KAAA;AAAO,IACb,KAAK,OAAA;AAAA,IACL,KAAK,OAAA;AACH,MAAA,OAAO,OAAA;AAAA,IACT,KAAK,MAAA;AACH,MAAA,OAAO,MAAA;AAAA,IACT,KAAK,MAAA;AACH,MAAA,OAAO,MAAA;AAAA,IACT,KAAK,OAAA;AAAA,IACL,KAAK,OAAA;AACH,MAAA,OAAO,OAAA;AAAA,IACT;AACE,MAAA,OAAO,MAAA;AAAA;AAEb;AAKA,SAAS,YAAA,CAAa,UAA8B,WAAA,EAA+B;AACjF,EAAA,IAAI,CAAC,WAAA,IAAe,WAAA,KAAgB,KAAA,EAAO;AACzC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,MAAM,UAAA,GAAqC;AAAA,IACzC,KAAA,EAAO,CAAA;AAAA,IACP,KAAA,EAAO,CAAA;AAAA,IACP,IAAA,EAAM,CAAA;AAAA,IACN,IAAA,EAAM,CAAA;AAAA,IACN,KAAA,EAAO,CAAA;AAAA,IACP,KAAA,EAAO;AAAA,GACT;AAEA,EAAA,MAAM,WAAA,GAAc,UAAA,CAAW,QAAQ,CAAA,IAAK,CAAA;AAC5C,EAAA,MAAM,cAAA,GAAiB,UAAA,CAAW,WAAW,CAAA,IAAK,CAAA;AAElD,EAAA,OAAO,WAAA,IAAe,cAAA;AACxB;AAEA,IAAO,uBAAQ,eAAA,CAA6C;AAAA,EAC1D,IAAA,EAAM,cAAA;AAAA,EACN,WAAA,EAAa,8BAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,SAAA,CAAU,GAAA,EAAK,MAAA,EAAQ;AAC3B,MAAA,MAAM,YAAA,GAAe,OAAO,eAAA,EAAgB;AAC5C,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,iCAAA,EAAmC,EAAE,cAAc,CAAA;AAG5E,MAAA,MAAM,YAAA,GAAe,GAAA,CAAI,QAAA,CAAS,IAAA,CAAK,eAAA,EAAgB;AACvD,MAAA,IAAI,CAAC,aAAa,YAAA,EAAc;AAC9B,QAAA,MAAM,MAAA,CAAO,IAAA;AAAA,UACX,SAAS,MAAA,CAAO;AAAA,YACd,KAAA,EAAO;AAAA,WACR;AAAA,SACH;AACA,QAAA,MAAA,CAAO,KAAA,CAAM,MAAM,yBAAyB,CAAA;AAAA,MAC9C;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,SAAA,CAAU,GAAA,EAAK,OAAA,EAAS,MAAA,EAAQ;AACpC,MAAA,MAAM,YAAA,GAAe,OAAO,eAAA,EAAgB;AAE5C,MAAA,MAAM,MAAA,GAAS,IAAI,aAAA,EAAc,CAC9B,GAAG,YAAA,EAAc,OAAOA,IAAAA,EAAK,OAAA,EAAS,UAAA,KAAe;AACpD,QAAA,MAAM,EAAE,KAAA,EAAO,KAAA,EAAM,GAAI,OAAA;AAEzB,QAAAA,IAAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,sCAAsC,EAAE,YAAA,EAAc,KAAA,EAAO,KAAA,EAAO,CAAA;AAG7F,QAAA,MAAM,mBAAA,GAAsB,aAAA,CAAc,GAAA,CAAI,YAAY,CAAA;AAC1D,QAAA,IAAI,mBAAA,EAAqB;AACvB,UAAA,mBAAA,EAAoB;AAAA,QACtB;AAGA,QAAA,MAAM,MAAA,GAAmB;AAAA,UACvB,MAAA,EAAQ;AAAA;AAAA,SACV;AAGA,QAAA,MAAM,cAAcA,IAAAA,CAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,CAAC,GAAA,KAAmB;AAElE,UAAA,IAAI,CAAC,YAAA,CAAa,GAAA,CAAI,KAAA,EAAO,KAAK,CAAA,EAAG;AACnC,YAAA;AAAA,UACF;AAGA,UAAA,MAAM,WAAW,GAAA,CAAI,MAAA,EAAQ,SAAS,GAAA,CAAI,MAAA,EAAQ,SAAS,GAAA,CAAI,MAAA;AAC/D,UAAA,IAAI,aAAa,KAAA,EAAO;AACtB,YAAA;AAAA,UACF;AAGA,UAAA,MAAA,CAAO,IAAA;AAAA,YACL,OAAO,MAAA,CAAO;AAAA,cACZ,WAAW,IAAI,IAAA,CAAK,GAAA,CAAI,SAAS,EAAE,WAAA,EAAY;AAAA,cAC/C,KAAA,EAAO,cAAA,CAAe,GAAA,CAAI,KAAK,CAAA;AAAA,cAC/B,SAAS,GAAA,CAAI,OAAA;AAAA,cACb,SAAS,GAAA,CAAI;AAAA,aACd;AAAA,WACH,CAAE,KAAA,CAAM,CAAC,GAAA,KAAQ;AACf,YAAAA,IAAAA,CAAI,SAAS,MAAA,CAAO,KAAA,CAAM,qCAAqC,GAAA,YAAe,KAAA,GAAQ,MAAM,MAAS,CAAA;AAAA,UACvG,CAAC,CAAA;AAAA,QACH,GAAG,MAAM,CAAA;AAGT,QAAA,aAAA,CAAc,GAAA,CAAI,cAAc,WAAW,CAAA;AAG3C,QAAA,MAAM,MAAA,CAAO,IAAA;AAAA,UACX,OAAO,MAAA,CAAO;AAAA,YACZ,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,YAClC,KAAA,EAAO,MAAA;AAAA,YACP,OAAA,EAAS,CAAA,2BAAA,EAA8B,KAAK,CAAA,SAAA,EAAY,SAAS,KAAK,CAAA,CAAA;AAAA,WACvE;AAAA,SACH;AAAA,MACF,CAAC,CAAA,CACA,EAAA,CAAG,gBAAgB,OAAOA,IAAAA,EAAK,UAAU,UAAA,KAAe;AACvD,QAAAA,KAAI,QAAA,CAAS,MAAA,CAAO,KAAK,wCAAA,EAA0C,EAAE,cAAc,CAAA;AAGnF,QAAA,MAAM,WAAA,GAAc,aAAA,CAAc,GAAA,CAAI,YAAY,CAAA;AAClD,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,WAAA,EAAY;AACZ,UAAA,aAAA,CAAc,OAAO,YAAY,CAAA;AAAA,QACnC;AAEA,QAAA,MAAM,MAAA,CAAO,IAAA;AAAA,UACX,OAAO,MAAA,CAAO;AAAA,YACZ,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,YAClC,KAAA,EAAO,MAAA;AAAA,YACP,OAAA,EAAS;AAAA,WACV;AAAA,SACH;AAAA,MACF,CAAC,CAAA;AAEH,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,OAAA,EAAgB,OAAO,GAAG,CAAA;AAAA,IACrD,CAAA;AAAA,IAEA,MAAM,YAAA,CAAa,GAAA,EAAK,IAAA,EAAM,MAAA,EAAQ;AAGpC,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,sCAAsC,EAAE,IAAA,EAAM,QAAQ,CAAA;AAAA,IAIjF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAK,KAAA,EAAO,MAAA,EAAQ;AAChC,MAAA,GAAA,CAAI,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,sBAAA,EAAwB,KAAK,CAAA;AACvD,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,CAAO,KAAK,QAAA,CAAS,MAAA,CAAO,EAAE,KAAA,EAAO,KAAA,CAAM,OAAA,EAAS,CAAC,CAAA;AAAA,MAC7D,SAAS,SAAA,EAAW;AAClB,QAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA,CAAM,+CAA+C,SAAA,YAAqB,KAAA,GAAQ,YAAY,MAAS,CAAA;AAAA,MAC7H;AAAA,IACF,CAAA;AAAA,IAEA,OAAA,GAAU;AAAA,IAGV;AAAA;AAEJ,CAAC","file":"logs-channel.js","sourcesContent":["/**\n * @module @kb-labs/workflow-cli/ws/logs-channel\n * WebSocket channel for real-time job logs streaming\n *\n * Uses platform.logs.subscribe() to stream logs filtered by jobId (runId).\n * Clients send Subscribe message with jobId to start receiving logs.\n */\n\nimport { defineWebSocket, defineMessage, MessageRouter } from '@kb-labs/sdk';\nimport type { LogRecord, LogQuery } from '@kb-labs/core-platform';\n\n// Define typed messages\nconst SubscribeMsg = defineMessage<{ jobId: string; level?: string }>('subscribe');\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nconst UnsubscribeMsg = defineMessage<{}>('unsubscribe');\n\nconst LogMsg = defineMessage<{\n  timestamp: string;\n  level: 'info' | 'warn' | 'error' | 'debug';\n  message: string;\n  context?: Record<string, unknown>;\n}>('log');\n\nconst ErrorMsg = defineMessage<{ error: string }>('error');\n\n// Incoming/Outgoing types (discriminated unions)\ntype Incoming = ReturnType<typeof SubscribeMsg.create> | ReturnType<typeof UnsubscribeMsg.create>;\n\ntype Outgoing =\n  | ReturnType<typeof LogMsg.create>\n  | ReturnType<ReturnType<typeof defineMessage<{ jobId: string; status: string }>>['create']>\n  | ReturnType<typeof ErrorMsg.create>;\n\n// Store active subscriptions per connection\nconst subscriptions = new Map<string, () => void>();\n\n/**\n * Convert LogRecord level to channel level type\n */\nfunction normalizeLevel(level: LogRecord['level']): 'info' | 'warn' | 'error' | 'debug' {\n  switch (level) {\n    case 'trace':\n    case 'debug':\n      return 'debug';\n    case 'info':\n      return 'info';\n    case 'warn':\n      return 'warn';\n    case 'error':\n    case 'fatal':\n      return 'error';\n    default:\n      return 'info';\n  }\n}\n\n/**\n * Check if log level matches filter\n */\nfunction levelMatches(logLevel: LogRecord['level'], filterLevel?: string): boolean {\n  if (!filterLevel || filterLevel === 'all') {\n    return true;\n  }\n\n  const levelOrder: Record<string, number> = {\n    debug: 0,\n    trace: 0,\n    info: 1,\n    warn: 2,\n    error: 3,\n    fatal: 3,\n  };\n\n  const logPriority = levelOrder[logLevel] ?? 1;\n  const filterPriority = levelOrder[filterLevel] ?? 0;\n\n  return logPriority >= filterPriority;\n}\n\nexport default defineWebSocket<unknown, Incoming, Outgoing>({\n  path: '/logs/:jobId',\n  description: 'Real-time job logs streaming',\n\n  handler: {\n    async onConnect(ctx, sender) {\n      const connectionId = sender.getConnectionId();\n      ctx.platform.logger.info('[logs-channel] Client connected', { connectionId });\n\n      // Check if streaming is available\n      const capabilities = ctx.platform.logs.getCapabilities();\n      if (!capabilities.hasStreaming) {\n        await sender.send(\n          ErrorMsg.create({\n            error: 'Log streaming not available. Enable logRingBuffer adapter in config.',\n          })\n        );\n        sender.close(1011, 'Streaming not available');\n      }\n    },\n\n    async onMessage(ctx, message, sender) {\n      const connectionId = sender.getConnectionId();\n\n      const router = new MessageRouter()\n        .on(SubscribeMsg, async (ctx, payload, _rawSender) => {\n          const { jobId, level } = payload;\n\n          ctx.platform.logger.info('[logs-channel] Subscribing to logs', { connectionId, jobId, level });\n\n          // Unsubscribe from previous subscription if exists\n          const existingUnsubscribe = subscriptions.get(connectionId);\n          if (existingUnsubscribe) {\n            existingUnsubscribe();\n          }\n\n          // Build filter for job logs\n          const filter: LogQuery = {\n            source: jobId, // Logs are tagged with jobId as source\n          };\n\n          // Subscribe to log stream\n          const unsubscribe = ctx.platform.logs.subscribe((log: LogRecord) => {\n            // Additional filtering by level\n            if (!levelMatches(log.level, level)) {\n              return;\n            }\n\n            // Also check if log belongs to this job via fields\n            const logJobId = log.fields?.jobId ?? log.fields?.runId ?? log.source;\n            if (logJobId !== jobId) {\n              return;\n            }\n\n            // Send log to client\n            sender.send(\n              LogMsg.create({\n                timestamp: new Date(log.timestamp).toISOString(),\n                level: normalizeLevel(log.level),\n                message: log.message,\n                context: log.fields,\n              })\n            ).catch((err) => {\n              ctx.platform.logger.error('[logs-channel] Failed to send log', err instanceof Error ? err : undefined);\n            });\n          }, filter);\n\n          // Store unsubscribe function\n          subscriptions.set(connectionId, unsubscribe);\n\n          // Send confirmation\n          await sender.send(\n            LogMsg.create({\n              timestamp: new Date().toISOString(),\n              level: 'info',\n              message: `Subscribed to logs for job ${jobId} (level: ${level || 'all'})`,\n            })\n          );\n        })\n        .on(UnsubscribeMsg, async (ctx, _payload, _rawSender) => {\n          ctx.platform.logger.info('[logs-channel] Unsubscribing from logs', { connectionId });\n\n          // Cleanup subscription\n          const unsubscribe = subscriptions.get(connectionId);\n          if (unsubscribe) {\n            unsubscribe();\n            subscriptions.delete(connectionId);\n          }\n\n          await sender.send(\n            LogMsg.create({\n              timestamp: new Date().toISOString(),\n              level: 'info',\n              message: 'Unsubscribed from logs',\n            })\n          );\n        });\n\n      await router.handle(ctx, message as any, sender.raw);\n    },\n\n    async onDisconnect(ctx, code, reason) {\n      // Note: We don't have access to sender here, need to cleanup by other means\n      // The connectionId would need to be stored during onConnect\n      ctx.platform.logger.info('[logs-channel] Client disconnected', { code, reason });\n\n      // Cleanup is handled automatically when connection is removed from registry\n      // The subscription will be cleaned up when the socket closes\n    },\n\n    async onError(ctx, error, sender) {\n      ctx.platform.logger.error('[logs-channel] Error', error);\n      try {\n        await sender.send(ErrorMsg.create({ error: error.message }));\n      } catch (sendError) {\n        ctx.platform.logger.error('[logs-channel] Failed to send error message', sendError instanceof Error ? sendError : undefined);\n      }\n    },\n\n    cleanup() {\n      // Note: This is called after each lifecycle event, not on final cleanup\n      // For connection-specific cleanup, we handle it in onDisconnect and onMessage\n    },\n  },\n});\n\n// Export for testing\nexport { subscriptions, normalizeLevel, levelMatches };\n"]}

package/.kb/runtime/workspaces/ws_f0f301b8-388d-4dc4-b301-475f2bc95f02/ws/progress-channel.d.ts

@@ -0,0 +1,11 @@
+import * as _kb_labs_plugin_contracts from '@kb-labs/plugin-contracts';
+
+/**
+ * @module @kb-labs/workflow-cli/ws/progress-channel
+ * WebSocket channel for real-time job progress updates
+ */
+declare const _default: {
+    execute(context: _kb_labs_plugin_contracts.PluginContextV3<unknown>, input: _kb_labs_plugin_contracts.WSInput): Promise<_kb_labs_plugin_contracts.CommandResult | void>;
+};
+
+export { _default as default };

package/.kb/runtime/workspaces/ws_f0f301b8-388d-4dc4-b301-475f2bc95f02/ws/progress-channel.js

@@ -0,0 +1,46 @@
+import { defineMessage, defineWebSocket, MessageRouter } from '@kb-labs/sdk';
+
+// src/ws/progress-channel.ts
+var SubscribeMsg = defineMessage("subscribe");
+var UnsubscribeMsg = defineMessage("unsubscribe");
+var StepStartMsg = defineMessage("step_start");
+var ErrorMsg = defineMessage("error");
+var progress_channel_default = defineWebSocket({
+  path: "/progress/:jobId",
+  description: "Real-time job progress updates",
+  handler: {
+    async onConnect(ctx, sender) {
+      ctx.platform.logger.info("[progress-channel] Client connected", { connectionId: sender.getConnectionId() });
+    },
+    async onMessage(ctx, message, sender) {
+      const router = new MessageRouter().on(SubscribeMsg, async (ctx2, payload, _rawSender) => {
+        const { jobId } = payload;
+        ctx2.platform.logger.info("[progress-channel] Subscribed to progress updates", { jobId });
+        await sender.send(
+          StepStartMsg.create({
+            stepName: "initialization",
+            stepIndex: 0
+          })
+        );
+      }).on(UnsubscribeMsg, async (ctx2, _payload, _rawSender) => {
+        ctx2.platform.logger.info("[progress-channel] Unsubscribed from progress updates");
+      });
+      await router.handle(ctx, message, sender.raw);
+    },
+    async onDisconnect(ctx, code, reason) {
+      ctx.platform.logger.info("[progress-channel] Client disconnected", { code, reason });
+    },
+    async onError(ctx, error, sender) {
+      ctx.platform.logger.error("[progress-channel] Error", error);
+      try {
+        await sender.send(ErrorMsg.create({ error: error.message }));
+      } catch (sendError) {
+        ctx.platform.logger.error("[progress-channel] Failed to send error message", sendError instanceof Error ? sendError : void 0);
+      }
+    }
+  }
+});
+
+export { progress_channel_default as default };
+//# sourceMappingURL=progress-channel.js.map
+//# sourceMappingURL=progress-channel.js.map

package/.kb/runtime/workspaces/ws_f0f301b8-388d-4dc4-b301-475f2bc95f02/ws/progress-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/ws/progress-channel.ts"],"names":["ctx"],"mappings":";;;AAQA,IAAM,YAAA,GAAe,cAAiC,WAAW,CAAA;AAEjE,IAAM,cAAA,GAAiB,cAAkB,aAAa,CAAA;AAEtD,IAAM,YAAA,GAAe,cAAuD,YAAY,CAAA;AAYxF,IAAM,QAAA,GAAW,cAAiC,OAAO,CAAA;AAYzD,IAAO,2BAAQ,eAAA,CAA6C;AAAA,EAC1D,IAAA,EAAM,kBAAA;AAAA,EACN,WAAA,EAAa,gCAAA;AAAA,EAEb,OAAA,EAAS;AAAA,IACP,MAAM,SAAA,CAAU,GAAA,EAAK,MAAA,EAAQ;AAE3B,MAAA,GAAA,CAAI,QAAA,CAAS,OAAO,IAAA,CAAK,qCAAA,EAAuC,EAAE,YAAA,EAAc,MAAA,CAAO,eAAA,EAAgB,EAAG,CAAA;AAAA,IAI5G,CAAA;AAAA,IAEA,MAAM,SAAA,CAAU,GAAA,EAAK,OAAA,EAAS,MAAA,EAAQ;AACpC,MAAA,MAAM,MAAA,GAAS,IAAI,aAAA,EAAc,CAC9B,GAAG,YAAA,EAAc,OAAOA,IAAAA,EAAK,OAAA,EAAS,UAAA,KAAe;AACpD,QAAA,MAAM,EAAE,OAAM,GAAI,OAAA;AAElB,QAAAA,KAAI,QAAA,CAAS,MAAA,CAAO,KAAK,mDAAA,EAAqD,EAAE,OAAO,CAAA;AAIvF,QAAA,MAAM,MAAA,CAAO,IAAA;AAAA,UACX,aAAa,MAAA,CAAO;AAAA,YAClB,QAAA,EAAU,gBAAA;AAAA,YACV,SAAA,EAAW;AAAA,WACZ;AAAA,SACH;AAAA,MACF,CAAC,CAAA,CACA,EAAA,CAAG,gBAAgB,OAAOA,IAAAA,EAAK,UAAU,UAAA,KAAe;AACvD,QAAAA,IAAAA,CAAI,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,uDAAuD,CAAA;AAAA,MAElF,CAAC,CAAA;AAEH,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,OAAA,EAAgB,OAAO,GAAG,CAAA;AAAA,IACrD,CAAA;AAAA,IAEA,MAAM,YAAA,CAAa,GAAA,EAAK,IAAA,EAAM,MAAA,EAAQ;AACpC,MAAA,GAAA,CAAI,SAAS,MAAA,CAAO,IAAA,CAAK,0CAA0C,EAAE,IAAA,EAAM,QAAQ,CAAA;AAAA,IAErF,CAAA;AAAA,IAEA,MAAM,OAAA,CAAQ,GAAA,EAAK,KAAA,EAAO,MAAA,EAAQ;AAChC,MAAA,GAAA,CAAI,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,0BAAA,EAA4B,KAAK,CAAA;AAC3D,MAAA,IAAI;AACF,QAAA,MAAM,MAAA,CAAO,KAAK,QAAA,CAAS,MAAA,CAAO,EAAE,KAAA,EAAO,KAAA,CAAM,OAAA,EAAS,CAAC,CAAA;AAAA,MAC7D,SAAS,SAAA,EAAW;AAClB,QAAA,GAAA,CAAI,SAAS,MAAA,CAAO,KAAA,CAAM,mDAAmD,SAAA,YAAqB,KAAA,GAAQ,YAAY,MAAS,CAAA;AAAA,MACjI;AAAA,IACF;AAAA;AAEJ,CAAC","file":"progress-channel.js","sourcesContent":["/**\n * @module @kb-labs/workflow-cli/ws/progress-channel\n * WebSocket channel for real-time job progress updates\n */\n\nimport { defineWebSocket, defineMessage, MessageRouter } from '@kb-labs/sdk';\n\n// Define typed messages\nconst SubscribeMsg = defineMessage<{ jobId: string }>('subscribe');\n// eslint-disable-next-line @typescript-eslint/no-empty-object-type\nconst UnsubscribeMsg = defineMessage<{}>('unsubscribe');\n\nconst StepStartMsg = defineMessage<{ stepName: string; stepIndex: number }>('step_start');\n\n// Type-only message definitions (used only in type unions)\ntype StepProgressMsg = ReturnType<typeof defineMessage<{ stepName: string; progress: number; message?: string }>>;\ntype StepCompleteMsg = ReturnType<typeof defineMessage<{\n  stepName: string;\n  status: 'completed' | 'failed';\n  durationMs: number;\n  error?: string;\n}>>;\ntype JobCompleteMsg = ReturnType<typeof defineMessage<{ jobId: string; status: string; durationMs: number }>>;\n\nconst ErrorMsg = defineMessage<{ error: string }>('error');\n\n// Incoming/Outgoing types\ntype Incoming = ReturnType<typeof SubscribeMsg.create> | ReturnType<typeof UnsubscribeMsg.create>;\n\ntype Outgoing =\n  | ReturnType<typeof StepStartMsg.create>\n  | StepProgressMsg\n  | StepCompleteMsg\n  | JobCompleteMsg\n  | ReturnType<typeof ErrorMsg.create>;\n\nexport default defineWebSocket<unknown, Incoming, Outgoing>({\n  path: '/progress/:jobId',\n  description: 'Real-time job progress updates',\n\n  handler: {\n    async onConnect(ctx, sender) {\n      // Note: jobId will come from path params via runtime, not ctx.params\n      ctx.platform.logger.info('[progress-channel] Client connected', { connectionId: sender.getConnectionId() });\n\n      // TODO: Subscribe to progress events from daemon/engine\n      // Client needs to send Subscribe message with jobId\n    },\n\n    async onMessage(ctx, message, sender) {\n      const router = new MessageRouter()\n        .on(SubscribeMsg, async (ctx, payload, _rawSender) => {\n          const { jobId } = payload;\n\n          ctx.platform.logger.info('[progress-channel] Subscribed to progress updates', { jobId });\n\n          // TODO: Start streaming progress updates from engine\n          // For now, send confirmation via step start message\n          await sender.send(\n            StepStartMsg.create({\n              stepName: 'initialization',\n              stepIndex: 0,\n            })\n          );\n        })\n        .on(UnsubscribeMsg, async (ctx, _payload, _rawSender) => {\n          ctx.platform.logger.info('[progress-channel] Unsubscribed from progress updates');\n          // TODO: Stop streaming\n        });\n\n      await router.handle(ctx, message as any, sender.raw);\n    },\n\n    async onDisconnect(ctx, code, reason) {\n      ctx.platform.logger.info('[progress-channel] Client disconnected', { code, reason });\n      // TODO: Cleanup subscriptions\n    },\n\n    async onError(ctx, error, sender) {\n      ctx.platform.logger.error('[progress-channel] Error', error);\n      try {\n        await sender.send(ErrorMsg.create({ error: error.message }));\n      } catch (sendError) {\n        ctx.platform.logger.error('[progress-channel] Failed to send error message', sendError instanceof Error ? sendError : undefined);\n      }\n    },\n  },\n});\n"]}

package/README.md

@@ -0,0 +1,54 @@
+# @kb-labs/rest-api-app
+
+Deployable Fastify application for the KB Labs REST API.
+
+## Overview
+
+Wires together `@kb-labs/rest-api-core`, plugin manifests, and runtime middleware into a production-ready HTTP service. All business capabilities come from discovered plugin manifests — the app itself only provides shared system endpoints and middleware.
+
+## Running Locally
+
+```bash
+# From kb-labs-rest-api root
+pnpm install
+pnpm --filter @kb-labs/rest-api-app dev
+# Server starts on http://localhost:5050
+```
+
+Build and run compiled output:
+
+```bash
+pnpm --filter @kb-labs/rest-api-app build
+pnpm --filter @kb-labs/rest-api-app start
+```
+
+## Key Components
+
+| Path | Responsibility |
+|------|----------------|
+| `src/bootstrap.ts` | Fastify server setup, middleware wiring, route registration |
+| `src/index.ts` | Entry point — calls `bootstrap` with repo root |
+| `src/routes/` | System routes: health, readiness, metrics, registry, OpenAPI, events |
+| `src/middleware/` | Security headers, CORS, rate limiting, request envelopes, timeouts |
+| `src/plugins/` | Plugin discovery and dynamic route mounting |
+| `src/events/` | SSE hub and registry event bridge |
+
+## System Endpoints
+
+- `GET /health` — versioned health snapshot (`kb.health/1`)
+- `GET /ready` — readiness probe (`200` or `503`)
+- `GET /openapi.json` — aggregated OpenAPI from all mounted plugins
+- `GET /api/v1/plugins/registry` — mounted plugin manifest list
+- `GET /api/v1/metrics` — Prometheus metrics
+- `GET /api/v1/events/registry` — SSE stream for registry and health changes
+
+## Tests
+
+```bash
+# From repo root
+pnpm test
+```
+
+## License
+
+KB Public License v1.1 © KB Labs

package/eslint.config.js

@@ -0,0 +1,23 @@
+/**
+ * Standard ESLint configuration template
+ *
+ * This is the canonical template for all @kb-labs packages.
+ * DO NOT modify this file locally - it is synced from @kb-labs/devkit
+ *
+ * Customization guidelines:
+ * - DevKit preset already includes all standard ignores
+ * - Only add project-specific ignores if absolutely necessary
+ * - Document why custom ignores are needed
+ *
+ * @see https://github.com/kb-labs/devkit#eslint-configuration
+ */
+import nodePreset from '@kb-labs/devkit/eslint/node.js';
+
+export default [
+  ...nodePreset,
+
+  // Ignore runtime-generated JS files (workspace sandboxes, etc.)
+  {
+    ignores: ['.kb/**']
+  }
+];

package/package.json

@@ -0,0 +1,72 @@
+{
+  "name": "@kb-labs/rest-api-app",
+  "version": "1.3.0",
+  "description": "REST API application for KB Labs, providing HTTP endpoints for plugin functionality",
+  "type": "module",
+  "main": "./dist/index.js",
+  "scripts": {
+    "clean": "rimraf dist",
+    "build": "tsup",
+    "dev": "tsx watch src/index.ts",
+    "start": "node dist/index.js",
+    "type-check": "tsc --noEmit",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "test": "vitest run --passWithNoTests -c ../../vitest.config.ts",
+    "test:watch": "vitest --passWithNoTests -c ../../vitest.config.ts"
+  },
+  "dependencies": {
+    "@fastify/cors": "^10.0.1",
+    "@fastify/rate-limit": "^10.1.1",
+    "@fastify/swagger": ">=9.5.1",
+    "@fastify/swagger-ui": "^5.2.0",
+    "@fastify/websocket": "^11.0.1",
+    "@kb-labs/shared-http": "^1.3.0",
+    "@kb-labs/core-contracts": "^1.5.0",
+    "fastify-type-provider-zod": "^6.0.0",
+    "@kb-labs/core-registry": "^1.5.0",
+    "@kb-labs/core-config": "^1.5.0",
+    "@kb-labs/core-platform": "^1.5.0",
+    "@kb-labs/core-runtime": "^1.5.0",
+    "@kb-labs/gateway-contracts": "^0.1.0",
+    "@kb-labs/core-tenant": "^1.5.0",
+    "@kb-labs/core-sys": "^1.5.0",
+    "@kb-labs/core-workspace": "^1.5.0",
+    "@kb-labs/plugin-contracts": "^1.3.0",
+    "@kb-labs/plugin-execution": "^1.3.0",
+    "@kb-labs/plugin-execution-factory": "^1.3.0",
+    "@kb-labs/plugin-runtime": "^1.3.0",
+    "@kb-labs/rest-api-contracts": "^1.3.0",
+    "@kb-labs/rest-api-core": "^1.3.0",
+    "@kb-labs/workflow-constants": "^1.4.0",
+    "@kb-labs/workflow-contracts": "^1.4.0",
+    "@kb-labs/workflow-engine": "^1.4.0",
+    "fastify": "^5.2.0",
+    "fastify-plugin": "^5.0.1",
+    "pino": "^8.16.2",
+    "pino-pretty": "^10.2.3",
+    "prom-client": "^15.1.3",
+    "ulid": "^2.3.0",
+    "ws": "^8.18.0",
+    "yaml": "^2.8.0",
+    "zod": "^4.0.0"
+  },
+  "devDependencies": {
+    "@kb-labs/devkit": "link:../../../../infra/kb-labs-devkit",
+    "@types/node": "^20.10.0",
+    "@types/ws": "^8.5.13",
+    "nodemon": "^3.1.11",
+    "tsup": "^8",
+    "tsx": "^4.20.5",
+    "typescript": "^5",
+    "vitest": "^3",
+    "rimraf": "^6.0.1"
+  },
+  "engines": {
+    "node": ">=20.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "kb": {
+    "manifest": "./dist/manifest.js"
+  }
+}

package/src/.kb/agents/sessions/session-1773470583796-ximqnfk/kpi-baseline.json

@@ -0,0 +1,17 @@
+{
+  "version": 1,
+  "updatedAt": "2026-03-14T06:45:05.523Z",
+  "driftRateEma": 0.25,
+  "evidenceDensityEma": 0.6666666666666666,
+  "toolErrorRateEma": 0,
+  "samples": 1,
+  "tokenHistory": [
+    18192
+  ],
+  "iterationUtilizationHistory": [
+    0.3
+  ],
+  "qualityScoreHistory": [
+    0.8611111111111112
+  ]
+}

package/src/.kb/memory/sessions/session-1773470583796-ximqnfk/fact-sheet.json

@@ -0,0 +1 @@
+{"facts":[["fact_1",{"id":"fact_1","iteration":1,"category":"tool_result","fact":"grep 'emit' found ~23 matches","confidence":0.8,"source":"grep_search","updatedAt":"2026-03-14T06:44:42.851Z","confirmations":1}],["fact_2",{"id":"fact_2","iteration":2,"category":"file_content","fact":"Read kb-labs-rest-api/apps/rest-api/src/events/hub.ts (65 lines). Starts with: File: kb-labs-rest-api/apps/rest-api/src/events/hub.ts","confidence":0.9,"source":"fs_read","updatedAt":"2026-03-14T06:44:45.046Z","confirmations":1}],["fact_3",{"id":"fact_3","iteration":2,"category":"file_content","fact":"Read kb-labs-rest-api/apps/rest-api/src/routes/__tests__/workflows.spec.ts (205 lines). Starts with: File: kb-labs-rest-api/apps/rest-api/src/routes/__tests__/workflows.spec.ts","confidence":0.9,"source":"fs_read","updatedAt":"2026-03-14T06:44:45.048Z","confirmations":1}]],"nextId":4}

package/src/bootstrap.ts

@@ -0,0 +1,233 @@
+/**
+ * @module @kb-labs/rest-api-app/bootstrap
+ * Server bootstrap and startup
+ */
+
+import { loadRestApiConfig } from '@kb-labs/rest-api-core';
+import { createServer } from './server';
+import { findRepoRoot } from '@kb-labs/core-sys';
+import { createRegistry, type IEntityRegistry } from '@kb-labs/core-registry';
+import { platform, createServiceBootstrap, loadEnvFromRoot } from '@kb-labs/core-runtime';
+import { SystemMetricsCollector } from './services/system-metrics-collector';
+import { metricsCollector as requestMetricsCollector, restDomainOperationMetrics } from './middleware/metrics.js';
+import * as path from 'node:path';
+import { promises as fs } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import { performance } from 'node:perf_hooks';
+
+// Singleton CLI API instance for cleanup
+let registryInstance: IEntityRegistry | null = null;
+
+// System metrics collector instance for cleanup
+let metricsCollector: SystemMetricsCollector | null = null;
+
+/**
+ * Find monorepo root (prefer pnpm-workspace.yaml with kb-* patterns)
+ * Looks for the topmost directory with pnpm-workspace.yaml that includes kb-* patterns
+ */
+async function findMonorepoRoot(startDir: string): Promise<string> {
+  let dir = path.resolve(startDir);
+  let monorepoRoot: string | null = null;
+  
+  // First, try to find workspace with kb-* patterns (the actual monorepo root)
+  while (true) {
+    try {
+      const workspacePath = path.join(dir, 'pnpm-workspace.yaml');
+      await fs.access(workspacePath);
+      const content = await fs.readFile(workspacePath, 'utf-8');
+      if (content.includes('kb-*')) {
+        // Found the monorepo root with kb-* patterns
+        monorepoRoot = dir;
+        break;
+      }
+    } catch {
+      // Continue
+    }
+    
+    const parent = path.dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+  
+  if (monorepoRoot) {
+    return monorepoRoot;
+  }
+  
+  // Fallback: try to find the topmost directory with both .git and pnpm-workspace.yaml
+  dir = path.resolve(startDir);
+  let foundRoot: string | null = null;
+  while (true) {
+    try {
+      const hasGit = await fs.access(path.join(dir, '.git')).then(() => true).catch(() => false);
+      const hasWorkspace = await fs.access(path.join(dir, 'pnpm-workspace.yaml')).then(() => true).catch(() => false);
+      
+      if (hasGit && hasWorkspace) {
+        foundRoot = dir;
+      }
+    } catch {
+      // Continue
+    }
+    
+    const parent = path.dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+  
+  if (foundRoot) {
+    return foundRoot;
+  }
+  
+  // Final fallback: try to find any pnpm-workspace.yaml
+  dir = path.resolve(startDir);
+  let topmostWorkspace: string | null = null;
+  while (true) {
+    try {
+      await fs.access(path.join(dir, 'pnpm-workspace.yaml'));
+      topmostWorkspace = dir;
+    } catch {
+      // Continue
+    }
+    
+    const parent = path.dirname(dir);
+    if (parent === dir) {
+      break;
+    }
+    dir = parent;
+  }
+  
+  if (topmostWorkspace) {
+    return topmostWorkspace;
+  }
+  
+  // Final fallback to standard findRepoRoot
+  return findRepoRoot(startDir);
+}
+
+/**
+ * Bootstrap REST API server
+ */
+export async function bootstrap(cwd: string = process.cwd()): Promise<void> {
+  // Detect repo root first so we can load .env before any config reads
+  const repoRoot = await findMonorepoRoot(cwd);
+
+  // Load .env early — must happen before loadRestApiConfig() so that
+  // KB_REST_* env overrides (port, redis, etc.) are available to the config mapper
+  loadEnvFromRoot(repoRoot);
+
+  // Load configuration (envMapper now sees fully-populated process.env)
+  const { config, diagnostics } = await loadRestApiConfig(cwd);
+
+  // Initialize platform (adapters from kb.config.json; .env already loaded above)
+  await createServiceBootstrap({ appId: 'rest-api', repoRoot });
+
+  // Now we can use platform.logger (configured from kb.config.json)
+  const startupRequestId = `rest-startup-${Date.now()}-${Math.random().toString(36).slice(2, 9)}`;
+  const startupTraceId = randomUUID();
+  const startupSpanId = randomUUID();
+  const bootstrapLogger = platform.logger.child({
+    layer: 'rest',
+    service: 'bootstrap',
+    requestId: startupRequestId,
+    reqId: startupRequestId,
+    traceId: startupTraceId,
+    spanId: startupSpanId,
+    invocationId: startupSpanId,
+    executionId: startupSpanId,
+  });
+
+  if (diagnostics.length > 0) {
+    bootstrapLogger.warn('Configuration diagnostics', { diagnosticsCount: diagnostics.length });
+    for (const diagnostic of diagnostics) {
+      bootstrapLogger.warn('Configuration diagnostic', {
+        level: diagnostic.level,
+        message: diagnostic.message,
+      });
+    }
+  }
+
+  bootstrapLogger.info('Resolved repo root', { cwd, repoRoot });
+  bootstrapLogger.info('Platform adapters initialized');
+
+  // Initialize entity registry
+  bootstrapLogger.info('Initializing entity registry');
+
+  const isDevelopment = process.env.NODE_ENV !== 'production';
+  const snapshotTTL = isDevelopment
+    ? 10 * 60 * 1000  // 10 minutes for development
+    : 60 * 60 * 1000; // 1 hour for production
+
+  const registryInitStart = performance.now();
+  const registry = await createRegistry({
+    root: repoRoot,
+    cache: {
+      ttlMs: snapshotTTL,
+      adapter: platform.cache,
+    },
+  });
+  restDomainOperationMetrics.recordOperation('registry.init', performance.now() - registryInitStart, 'ok');
+
+  const plugins = registry.listPlugins();
+  bootstrapLogger.info('Entity registry initialized', {
+    pluginsFound: plugins.length,
+    pluginIds: plugins.map(p => `${p.id}@${p.version}`),
+  });
+
+  registryInstance = registry;
+
+  registry.onChange((diff) => {
+    restDomainOperationMetrics.recordOperation('registry.refresh', 0, 'ok');
+    bootstrapLogger.info('Registry changed', {
+      added: diff.added.length,
+      removed: diff.removed.length,
+      changed: diff.changed.length,
+    });
+  });
+
+  const server = await createServer(config, repoRoot, registry);
+
+  // Start system metrics collector
+  bootstrapLogger.info('Starting system metrics collector');
+  metricsCollector = new SystemMetricsCollector('rest', () => requestMetricsCollector.getActiveRequests());
+  await metricsCollector.start(10000, 60000); // Collect every 10s, TTL 60s
+
+  // Start server
+  const address = await server.listen({
+    port: config.port,
+    host: '0.0.0.0',
+  });
+
+  bootstrapLogger.info('REST API server listening', { address });
+
+  // Setup graceful shutdown
+  const shutdown = async (signal: string) => {
+    bootstrapLogger.warn('Received shutdown signal', { signal });
+
+    // Stop metrics collector
+    if (metricsCollector) {
+      metricsCollector.stop();
+      metricsCollector = null;
+    }
+
+    // Dispose CLI API
+    if (registryInstance) {
+      await registryInstance.dispose();
+      registryInstance = null;
+    }
+
+    // Shutdown platform (includes ExecutionBackend and all adapters)
+    await platform.shutdown();
+    bootstrapLogger.info('Platform shutdown complete');
+
+    // Close server
+    await server.close();
+    bootstrapLogger.info('Server closed');
+    process.exit(0);
+  };
+
+  process.on('SIGTERM', () => shutdown('SIGTERM'));
+  process.on('SIGINT', () => shutdown('SIGINT'));
+}

package/src/diagnostics/header-debug.ts

@@ -0,0 +1,37 @@
+/**
+ * @module @kb-labs/rest-api-app/diagnostics/header-debug
+ * In-memory buffer for recent header policy decisions (debug & dry-run).
+ */
+
+export interface HeaderDebugEntry {
+  timestamp: number;
+  requestId: string;
+  pluginId?: string;
+  routeId?: string;
+  direction: 'inbound' | 'outbound';
+  header: string;
+  allowed?: boolean;
+  reason?: string;
+  action?: string;
+  dryRun: boolean;
+}
+
+const MAX_ENTRIES = 200;
+const buffer: HeaderDebugEntry[] = [];
+
+export function recordHeaderDebug(entry: HeaderDebugEntry): void {
+  buffer.push(entry);
+  if (buffer.length > MAX_ENTRIES) {
+    buffer.splice(0, buffer.length - MAX_ENTRIES);
+  }
+}
+
+export function getHeaderDebugEntries(limit = 50): HeaderDebugEntry[] {
+  if (buffer.length === 0) {
+    return [];
+  }
+  const clamped = Math.max(1, Math.min(limit, MAX_ENTRIES));
+  return buffer.slice(-clamped).reverse();
+}
+
+