@lobu/gateway 2.8.0

package/dist/routes/internal/audio.js

@@ -0,0 +1,118 @@
+"use strict";
+/**
+ * Internal Audio Routes
+ *
+ * Worker-facing endpoints for audio generation (TTS).
+ * Used by the GenerateAudio custom MCP tool.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createAudioRoutes = createAudioRoutes;
+const core_1 = require("@lobu/core");
+const hono_1 = require("hono");
+const middleware_1 = require("./middleware");
+const logger = (0, core_1.createLogger)("internal-audio-routes");
+/**
+ * Create internal audio routes (Hono)
+ */
+function createAudioRoutes(transcriptionService) {
+    const router = new hono_1.Hono();
+    /**
+     * Generate audio from text (TTS)
+     * POST /internal/audio/synthesize
+     *
+     * Body: {
+     *   text: string (required) - Text to convert to speech
+     *   voice?: string - Provider-specific voice ID
+     *   speed?: number - Speech speed (0.5-2.0)
+     * }
+     *
+     * Response: Audio file (binary) with Content-Type header
+     */
+    router.post("/internal/audio/synthesize", middleware_1.authenticateWorker, async (c) => {
+        try {
+            const worker = c.get("worker");
+            const { text, voice, speed } = await c.req.json();
+            if (!text || typeof text !== "string") {
+                return c.json({ error: "text is required and must be a string" }, 400);
+            }
+            if (text.length > 4096) {
+                return c.json({ error: "text must be 4096 characters or less" }, 400);
+            }
+            const agentId = worker.agentId;
+            if (!agentId) {
+                return c.json({ error: "Missing agentId in worker context" }, 400);
+            }
+            logger.info("Synthesizing audio", {
+                agentId,
+                textLength: text.length,
+                voice,
+            });
+            const result = await transcriptionService.synthesize(text, agentId, {
+                voice,
+                speed,
+            });
+            if ("error" in result) {
+                logger.warn("Audio synthesis failed", { error: result.error });
+                return c.json({
+                    error: result.error,
+                    availableProviders: result.availableProviders,
+                }, 400);
+            }
+            // Return audio as binary response
+            return new Response(result.audioBuffer, {
+                headers: {
+                    "Content-Type": result.mimeType,
+                    "Content-Length": result.audioBuffer.length.toString(),
+                    "X-Audio-Provider": result.provider,
+                },
+            });
+        }
+        catch (error) {
+            logger.error("Audio synthesis error", { error });
+            return c.json({
+                error: error instanceof Error
+                    ? error.message
+                    : "Failed to synthesize audio",
+            }, 500);
+        }
+    });
+    /**
+     * Check audio capabilities for current agent
+     * GET /internal/audio/capabilities
+     *
+     * Response: {
+     *   available: boolean,
+     *   provider?: string,
+     *   features: { transcription: boolean, synthesis: boolean }
+     * }
+     */
+    router.get("/internal/audio/capabilities", middleware_1.authenticateWorker, async (c) => {
+        try {
+            const worker = c.get("worker");
+            const agentId = worker.agentId;
+            if (!agentId) {
+                return c.json({ error: "Missing agentId in worker context" }, 400);
+            }
+            const config = await transcriptionService.getConfig(agentId);
+            if (!config) {
+                return c.json({
+                    available: false,
+                    features: { transcription: false, synthesis: false },
+                    providers: transcriptionService.getProviderInfo(),
+                });
+            }
+            return c.json({
+                available: true,
+                provider: config.provider,
+                features: { transcription: true, synthesis: true },
+            });
+        }
+        catch (error) {
+            logger.error("Capabilities check error", { error });
+            return c.json({ error: "Failed to check capabilities" }, 500);
+        }
+    });
+    logger.debug("Internal audio routes registered");
+    return router;
+}
+//# sourceMappingURL=audio.js.map

package/dist/routes/internal/audio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audio.js","sourceRoot":"","sources":["../../../src/routes/internal/audio.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAaH,8CA0HC;AArID,qCAA0C;AAC1C,+BAA4B;AAE5B,6CAAkD;AAGlD,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,uBAAuB,CAAC,CAAC;AAErD;;GAEG;AACH,SAAgB,iBAAiB,CAC/B,oBAA0C;IAE1C,MAAM,MAAM,GAAG,IAAI,WAAI,EAAiB,CAAC;IAEzC;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,+BAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAElD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,GAAG,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAChC,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,KAAK;aACN,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE;gBAClE,KAAK;gBACL,KAAK;aACN,CAAC,CAAC;YAEH,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACtB,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/D,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;iBAC9C,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;gBACtC,OAAO,EAAE;oBACP,cAAc,EAAE,MAAM,CAAC,QAAQ;oBAC/B,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE;oBACtD,kBAAkB,EAAE,MAAM,CAAC,QAAQ;iBACpC;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EACH,KAAK,YAAY,KAAK;oBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,4BAA4B;aACnC,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;;;;;;;OASG;IACH,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,+BAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YAE/B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAE7D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CAAC;oBACZ,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;oBACpD,SAAS,EAAE,oBAAoB,CAAC,eAAe,EAAE;iBAClD,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,IAAI;gBACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAEjD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/internal/device-auth.d.ts

@@ -0,0 +1,42 @@
+import { Hono } from "hono";
+import type Redis from "ioredis";
+import type { McpConfigService } from "../../auth/mcp/config-service";
+import type { WorkerContext } from "./types";
+interface StoredCredential {
+    accessToken: string;
+    refreshToken?: string;
+    expiresAt: number;
+    clientId: string;
+    clientSecret?: string;
+    tokenUrl: string;
+}
+export interface DeviceAuthConfig {
+    redis: Redis;
+    mcpConfigService: McpConfigService;
+}
+export declare function getStoredCredential(redis: Redis, agentId: string, userId: string, mcpId: string): Promise<StoredCredential | null>;
+export declare function refreshCredential(redis: Redis, agentId: string, userId: string, mcpId: string, credential: StoredCredential): Promise<StoredCredential | null>;
+/**
+ * Try to complete a pending device-code auth flow.
+ * Called by the MCP proxy's resolveCredentialToken when no stored credential
+ * exists but a device-auth flow may have been started earlier.
+ * Returns the access token on success, null if pending or no flow in progress.
+ */
+export declare function tryCompletePendingDeviceAuth(redis: Redis, agentId: string, userId: string, mcpId: string): Promise<string | null>;
+/**
+ * Start device-code auth flow for a given MCP server.
+ * Reusable by the MCP proxy to auto-initiate auth on "unauthorized" errors.
+ */
+export declare function startDeviceAuth(redis: Redis, mcpConfigService: {
+    getHttpServer: (id: string, agentId?: string) => Promise<{
+        upstreamUrl: string;
+    } | undefined>;
+}, mcpId: string, agentId: string, userId: string): Promise<{
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    expiresIn: number;
+} | null>;
+export declare function createDeviceAuthRoutes(config: DeviceAuthConfig): Hono<WorkerContext>;
+export {};
+//# sourceMappingURL=device-auth.d.ts.map

package/dist/routes/internal/device-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-auth.d.ts","sourceRoot":"","sources":["../../../src/routes/internal/device-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAO7C,UAAU,gBAAgB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAkBD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,KAAK,CAAC;IACb,gBAAgB,EAAE,gBAAgB,CAAC;CACpC;AAsBD,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAQlC;AAmBD,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAoElC;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqExB;AAUD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,KAAK,EAAE,KAAK,EACZ,gBAAgB,EAAE;IAChB,aAAa,EAAE,CACb,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,MAAM,KACb,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;CACnD,EACD,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAAC,CAqHR;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,gBAAgB,GACvB,IAAI,CAAC,aAAa,CAAC,CAmKrB"}

package/dist/routes/internal/device-auth.js

@@ -0,0 +1,397 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getStoredCredential = getStoredCredential;
+exports.refreshCredential = refreshCredential;
+exports.tryCompletePendingDeviceAuth = tryCompletePendingDeviceAuth;
+exports.startDeviceAuth = startDeviceAuth;
+exports.createDeviceAuthRoutes = createDeviceAuthRoutes;
+const core_1 = require("@lobu/core");
+const hono_1 = require("hono");
+const device_code_client_1 = require("../../auth/external/device-code-client");
+const middleware_1 = require("./middleware");
+const logger = (0, core_1.createLogger)("device-auth");
+const DEFAULT_MCP_SCOPE = "mcp:read mcp:write profile:read";
+const DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+function credentialKey(agentId, userId, mcpId) {
+    return `auth:credential:${agentId}:${userId}:${mcpId}`;
+}
+function deviceAuthKey(agentId, userId, mcpId) {
+    return `device-auth:${agentId}:${userId}:${mcpId}`;
+}
+function clientCacheKey(mcpId) {
+    return `device-auth:client:${mcpId}`;
+}
+function refreshLockKey(agentId, userId, mcpId) {
+    return `auth:refresh-lock:${agentId}:${userId}:${mcpId}`;
+}
+async function getStoredCredential(redis, agentId, userId, mcpId) {
+    const raw = await redis.get(credentialKey(agentId, userId, mcpId));
+    if (!raw)
+        return null;
+    try {
+        return JSON.parse((0, core_1.decrypt)(raw));
+    }
+    catch (_a) {
+        return null;
+    }
+}
+async function storeCredential(redis, agentId, userId, mcpId, credential) {
+    const encrypted = (0, core_1.encrypt)(JSON.stringify(credential));
+    // Store with 90-day TTL (tokens can be refreshed before expiry)
+    await redis.set(credentialKey(agentId, userId, mcpId), encrypted, "EX", 90 * 24 * 60 * 60);
+}
+async function refreshCredential(redis, agentId, userId, mcpId, credential) {
+    if (!credential.refreshToken)
+        return null;
+    const lockKey = refreshLockKey(agentId, userId, mcpId);
+    const acquired = await redis.set(lockKey, "1", "EX", 30, "NX");
+    if (!acquired) {
+        // Another request is refreshing — wait briefly and re-read
+        await new Promise((r) => setTimeout(r, 150));
+        return getStoredCredential(redis, agentId, userId, mcpId);
+    }
+    try {
+        const body = {
+            grant_type: "refresh_token",
+            client_id: credential.clientId,
+            refresh_token: credential.refreshToken,
+        };
+        if (credential.clientSecret) {
+            body.client_secret = credential.clientSecret;
+        }
+        const response = await fetch(credential.tokenUrl, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                Accept: "application/json",
+            },
+            body: JSON.stringify(body),
+        });
+        if (!response.ok) {
+            logger.error("Token refresh failed", {
+                status: response.status,
+                agentId,
+                userId,
+                mcpId,
+            });
+            return null;
+        }
+        const data = (await response.json());
+        if (typeof data.access_token !== "string")
+            return null;
+        const refreshed = {
+            accessToken: data.access_token,
+            refreshToken: typeof data.refresh_token === "string"
+                ? data.refresh_token
+                : credential.refreshToken,
+            expiresAt: typeof data.expires_in === "number"
+                ? Date.now() + data.expires_in * 1000
+                : Date.now() + 3600000,
+            clientId: credential.clientId,
+            clientSecret: credential.clientSecret,
+            tokenUrl: credential.tokenUrl,
+        };
+        await storeCredential(redis, agentId, userId, mcpId, refreshed);
+        logger.info("Token refreshed", { agentId, userId, mcpId });
+        return refreshed;
+    }
+    catch (error) {
+        logger.error("Token refresh error", { error, agentId, userId, mcpId });
+        return null;
+    }
+    finally {
+        await redis.del(lockKey).catch(() => undefined);
+    }
+}
+/**
+ * Try to complete a pending device-code auth flow.
+ * Called by the MCP proxy's resolveCredentialToken when no stored credential
+ * exists but a device-auth flow may have been started earlier.
+ * Returns the access token on success, null if pending or no flow in progress.
+ */
+async function tryCompletePendingDeviceAuth(redis, agentId, userId, mcpId) {
+    const raw = await redis.get(deviceAuthKey(agentId, userId, mcpId));
+    if (!raw)
+        return null;
+    let deviceState;
+    try {
+        deviceState = JSON.parse(raw);
+    }
+    catch (_a) {
+        return null;
+    }
+    if (Date.now() > deviceState.expiresAt) {
+        await redis.del(deviceAuthKey(agentId, userId, mcpId));
+        return null;
+    }
+    try {
+        const deviceCodeClient = new device_code_client_1.GenericDeviceCodeClient({
+            clientId: deviceState.clientId,
+            clientSecret: deviceState.clientSecret,
+            tokenUrl: deviceState.tokenUrl,
+            deviceAuthorizationUrl: `${deviceState.issuer}/oauth/device_authorization`,
+            scope: DEFAULT_MCP_SCOPE,
+            tokenEndpointAuthMethod: deviceState.clientSecret
+                ? "client_secret_post"
+                : "none",
+        });
+        const pollResult = await deviceCodeClient.pollForToken(deviceState.deviceCode, deviceState.interval);
+        if (pollResult.status === "pending") {
+            return null;
+        }
+        if (pollResult.status === "error") {
+            await redis.del(deviceAuthKey(agentId, userId, mcpId));
+            return null;
+        }
+        // Success — store credential and clean up
+        const { credentials } = pollResult;
+        const storedCred = {
+            accessToken: credentials.accessToken,
+            refreshToken: credentials.refreshToken,
+            expiresAt: credentials.expiresAt,
+            clientId: deviceState.clientId,
+            clientSecret: deviceState.clientSecret,
+            tokenUrl: deviceState.tokenUrl,
+        };
+        await storeCredential(redis, agentId, userId, mcpId, storedCred);
+        await redis.del(deviceAuthKey(agentId, userId, mcpId));
+        logger.info("Device auth auto-completed by proxy", {
+            mcpId,
+            agentId,
+            userId,
+        });
+        return credentials.accessToken;
+    }
+    catch (error) {
+        logger.warn("Auto-complete device auth failed", {
+            mcpId,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return null;
+    }
+}
+function deriveOAuthBaseUrl(upstreamUrl) {
+    const url = new URL(upstreamUrl);
+    url.pathname = "/";
+    url.search = "";
+    url.hash = "";
+    return url.toString().replace(/\/$/, "");
+}
+/**
+ * Start device-code auth flow for a given MCP server.
+ * Reusable by the MCP proxy to auto-initiate auth on "unauthorized" errors.
+ */
+async function startDeviceAuth(redis, mcpConfigService, mcpId, agentId, userId) {
+    // Reuse existing pending device auth flow if not expired
+    const existingRaw = await redis.get(deviceAuthKey(agentId, userId, mcpId));
+    if (existingRaw) {
+        try {
+            const existing = JSON.parse(existingRaw);
+            if (existing.expiresAt > Date.now()) {
+                const httpServer = await mcpConfigService.getHttpServer(mcpId, agentId);
+                const issuer = httpServer
+                    ? deriveOAuthBaseUrl(httpServer.upstreamUrl)
+                    : existing.issuer;
+                const verificationUri = `${issuer}/oauth/device`;
+                logger.info("Reusing existing pending device auth", {
+                    mcpId,
+                    agentId,
+                    userId,
+                });
+                return {
+                    userCode: existing.userCode || "",
+                    verificationUri,
+                    verificationUriComplete: existing.userCode
+                        ? `${verificationUri}?user_code=${existing.userCode}`
+                        : verificationUri,
+                    expiresIn: Math.floor((existing.expiresAt - Date.now()) / 1000),
+                };
+            }
+        }
+        catch (_a) {
+            // Corrupted state — fall through to start new flow
+        }
+    }
+    const httpServer = await mcpConfigService.getHttpServer(mcpId, agentId);
+    if (!httpServer) {
+        logger.warn("startDeviceAuth: httpServer not found", { mcpId, agentId });
+        return null;
+    }
+    const issuer = deriveOAuthBaseUrl(httpServer.upstreamUrl);
+    // Check cached client registration
+    let client = null;
+    const cachedClient = await redis.get(clientCacheKey(mcpId));
+    if (cachedClient) {
+        try {
+            client = JSON.parse(cachedClient);
+        }
+        catch (_b) {
+            client = null;
+        }
+    }
+    // Register a new client if needed
+    if (!client) {
+        const regResponse = await fetch(`${issuer}/oauth/register`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+                grant_types: [DEVICE_CODE_GRANT_TYPE, "refresh_token"],
+                token_endpoint_auth_method: "none",
+                client_name: "Lobu Gateway Device Auth",
+                scope: DEFAULT_MCP_SCOPE,
+            }),
+        });
+        if (!regResponse.ok)
+            return null;
+        const registration = (await regResponse.json());
+        client = {
+            clientId: registration.client_id,
+            clientSecret: registration.client_secret,
+        };
+        await redis.set(clientCacheKey(mcpId), JSON.stringify(client));
+    }
+    const deviceCodeClient = new device_code_client_1.GenericDeviceCodeClient({
+        clientId: client.clientId,
+        clientSecret: client.clientSecret,
+        tokenUrl: `${issuer}/oauth/token`,
+        deviceAuthorizationUrl: `${issuer}/oauth/device_authorization`,
+        scope: DEFAULT_MCP_SCOPE,
+        tokenEndpointAuthMethod: client.clientSecret
+            ? "client_secret_post"
+            : "none",
+    });
+    const started = await deviceCodeClient.requestDeviceCode();
+    const deviceState = {
+        deviceCode: started.deviceAuthId,
+        userCode: started.userCode,
+        clientId: client.clientId,
+        clientSecret: client.clientSecret,
+        interval: started.interval,
+        expiresAt: Date.now() + started.expiresIn * 1000,
+        tokenUrl: `${issuer}/oauth/token`,
+        issuer,
+    };
+    await redis.set(deviceAuthKey(agentId, userId, mcpId), JSON.stringify(deviceState), "EX", started.expiresIn);
+    logger.info("Device auth started (auto)", { mcpId, agentId, userId });
+    return {
+        userCode: started.userCode,
+        verificationUri: started.verificationUri,
+        verificationUriComplete: started.verificationUriComplete,
+        expiresIn: started.expiresIn,
+    };
+}
+function createDeviceAuthRoutes(config) {
+    const { redis, mcpConfigService } = config;
+    const router = new hono_1.Hono();
+    // POST /internal/device-auth/start
+    router.post("/internal/device-auth/start", middleware_1.authenticateWorker, async (c) => {
+        const body = await c.req.json();
+        const mcpId = body === null || body === void 0 ? void 0 : body.mcpId;
+        if (!mcpId) {
+            return c.json({ error: "Missing required field: mcpId" }, 400);
+        }
+        const worker = c.get("worker");
+        const agentId = worker.agentId || worker.userId;
+        const userId = worker.userId;
+        try {
+            const result = await startDeviceAuth(redis, mcpConfigService, mcpId, agentId, userId);
+            if (!result) {
+                return c.json({
+                    error: `MCP server '${mcpId}' not found or client registration failed`,
+                }, 404);
+            }
+            return c.json(result);
+        }
+        catch (error) {
+            logger.error("Failed to start device auth", {
+                mcpId,
+                error: error instanceof Error ? error.message : String(error),
+                stack: error instanceof Error ? error.stack : undefined,
+            });
+            return c.json({ error: "Failed to start device authentication" }, 500);
+        }
+    });
+    // POST /internal/device-auth/poll
+    router.post("/internal/device-auth/poll", middleware_1.authenticateWorker, async (c) => {
+        const body = await c.req.json();
+        const mcpId = body === null || body === void 0 ? void 0 : body.mcpId;
+        if (!mcpId) {
+            return c.json({ error: "Missing required field: mcpId" }, 400);
+        }
+        const worker = c.get("worker");
+        const agentId = worker.agentId || worker.userId;
+        const userId = worker.userId;
+        const raw = await redis.get(deviceAuthKey(agentId, userId, mcpId));
+        if (!raw) {
+            return c.json({
+                status: "error",
+                message: "No device auth in progress. Call start first.",
+            }, 400);
+        }
+        const deviceState = JSON.parse(raw);
+        if (Date.now() > deviceState.expiresAt) {
+            await redis.del(deviceAuthKey(agentId, userId, mcpId));
+            return c.json({ status: "error", message: "Device code expired. Start again." }, 400);
+        }
+        try {
+            const deviceCodeClient = new device_code_client_1.GenericDeviceCodeClient({
+                clientId: deviceState.clientId,
+                clientSecret: deviceState.clientSecret,
+                tokenUrl: deviceState.tokenUrl,
+                deviceAuthorizationUrl: `${deviceState.issuer}/oauth/device_authorization`,
+                scope: DEFAULT_MCP_SCOPE,
+                tokenEndpointAuthMethod: deviceState.clientSecret
+                    ? "client_secret_post"
+                    : "none",
+            });
+            const pollResult = await deviceCodeClient.pollForToken(deviceState.deviceCode, deviceState.interval);
+            if (pollResult.status === "pending") {
+                // Update interval if slow_down was received
+                if (pollResult.interval &&
+                    pollResult.interval !== deviceState.interval) {
+                    deviceState.interval = pollResult.interval;
+                    const ttl = Math.max(Math.floor((deviceState.expiresAt - Date.now()) / 1000), 10);
+                    await redis.set(deviceAuthKey(agentId, userId, mcpId), JSON.stringify(deviceState), "EX", ttl);
+                }
+                return c.json({ status: "pending" });
+            }
+            if (pollResult.status === "error") {
+                await redis.del(deviceAuthKey(agentId, userId, mcpId));
+                return c.json({ status: "error", message: pollResult.error });
+            }
+            // Success — store credential and clean up device auth state
+            const { credentials } = pollResult;
+            const storedCred = {
+                accessToken: credentials.accessToken,
+                refreshToken: credentials.refreshToken,
+                expiresAt: credentials.expiresAt,
+                clientId: deviceState.clientId,
+                clientSecret: deviceState.clientSecret,
+                tokenUrl: deviceState.tokenUrl,
+            };
+            await storeCredential(redis, agentId, userId, mcpId, storedCred);
+            await redis.del(deviceAuthKey(agentId, userId, mcpId));
+            logger.info("Device auth completed", { mcpId, agentId, userId });
+            return c.json({ status: "complete" });
+        }
+        catch (error) {
+            logger.error("Failed to poll device auth", { mcpId, error });
+            return c.json({ status: "error", message: "Failed to poll device auth" }, 500);
+        }
+    });
+    // GET /internal/device-auth/status?mcpId=owletto
+    router.get("/internal/device-auth/status", middleware_1.authenticateWorker, async (c) => {
+        const mcpId = c.req.query("mcpId");
+        if (!mcpId) {
+            return c.json({ error: "Missing required query param: mcpId" }, 400);
+        }
+        const worker = c.get("worker");
+        const agentId = worker.agentId || worker.userId;
+        const userId = worker.userId;
+        const credential = await getStoredCredential(redis, agentId, userId, mcpId);
+        return c.json({ authenticated: !!credential });
+    });
+    logger.debug("Device auth routes registered");
+    return router;
+}
+//# sourceMappingURL=device-auth.js.map

package/dist/routes/internal/device-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-auth.js","sourceRoot":"","sources":["../../../src/routes/internal/device-auth.ts"],"names":[],"mappings":";;AA+DA,kDAaC;AAmBD,8CA0EC;AAQD,oEA0EC;AAcD,0CAqIC;AAED,wDAqKC;AArjBD,qCAA4D;AAC5D,+BAA4B;AAE5B,+EAAiF;AAEjF,6CAAkD;AAGlD,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,aAAa,CAAC,CAAC;AAE3C,MAAM,iBAAiB,GAAG,iCAAiC,CAAC;AAC5D,MAAM,sBAAsB,GAAG,8CAA8C,CAAC;AAgC9E,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa;IACnE,OAAO,mBAAmB,OAAO,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,MAAc,EAAE,KAAa;IACnE,OAAO,eAAe,OAAO,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,sBAAsB,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CACrB,OAAe,EACf,MAAc,EACd,KAAa;IAEb,OAAO,qBAAqB,OAAO,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;AAC3D,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,KAAY,EACZ,OAAe,EACf,MAAc,EACd,KAAa;IAEb,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,cAAO,EAAC,GAAG,CAAC,CAAqB,CAAC;IACtD,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAY,EACZ,OAAe,EACf,MAAc,EACd,KAAa,EACb,UAA4B;IAE5B,MAAM,SAAS,GAAG,IAAA,cAAO,EAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,gEAAgE;IAChE,MAAM,KAAK,CAAC,GAAG,CACb,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EACrC,SAAS,EACT,IAAI,EACJ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAClB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,KAAY,EACZ,OAAe,EACf,MAAc,EACd,KAAa,EACb,UAA4B;IAE5B,IAAI,CAAC,UAAU,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAE/D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,2DAA2D;QAC3D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,OAAO,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAA2B;YACnC,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,UAAU,CAAC,QAAQ;YAC9B,aAAa,EAAE,UAAU,CAAC,YAAY;SACvC,CAAC;QACF,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC;QAC/C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;gBACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO;gBACP,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAEvD,MAAM,SAAS,GAAqB;YAClC,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EACV,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;gBACpC,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,UAAU,CAAC,YAAY;YAC7B,SAAS,EACP,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;gBACjC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI;gBACrC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAS;YAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B,CAAC;QAEF,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,4BAA4B,CAChD,KAAY,EACZ,OAAe,EACf,MAAc,EACd,KAAa;IAEb,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,WAA6B,CAAC;IAClC,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IACpD,CAAC;IAAC,WAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,gBAAgB,GAAG,IAAI,4CAAuB,CAAC;YACnD,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,sBAAsB,EAAE,GAAG,WAAW,CAAC,MAAM,6BAA6B;YAC1E,KAAK,EAAE,iBAAiB;YACxB,uBAAuB,EAAE,WAAW,CAAC,YAAY;gBAC/C,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,MAAM;SACX,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,YAAY,CACpD,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,QAAQ,CACrB,CAAC;QAEF,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,0CAA0C;QAC1C,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;QACnC,MAAM,UAAU,GAAqB;YACnC,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,SAAS,EAAE,WAAW,CAAC,SAAS;YAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;YACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;QAEF,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAEvD,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;YACjD,KAAK;YACL,OAAO;YACP,MAAM;SACP,CAAC,CAAC;QACH,OAAO,WAAW,CAAC,WAAW,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC9C,KAAK;YACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;IACnB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,eAAe,CACnC,KAAY,EACZ,gBAKC,EACD,KAAa,EACb,OAAe,EACf,MAAc;IAOd,yDAAyD;IACzD,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAqB,CAAC;YAC7D,IAAI,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACpC,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxE,MAAM,MAAM,GAAG,UAAU;oBACvB,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,WAAW,CAAC;oBAC5C,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACpB,MAAM,eAAe,GAAG,GAAG,MAAM,eAAe,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;oBAClD,KAAK;oBACL,OAAO;oBACP,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO;oBACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;oBACjC,eAAe;oBACf,uBAAuB,EAAE,QAAQ,CAAC,QAAQ;wBACxC,CAAC,CAAC,GAAG,eAAe,cAAc,QAAQ,CAAC,QAAQ,EAAE;wBACrD,CAAC,CAAC,eAAe;oBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;iBAChE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,WAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAE1D,mCAAmC;IACnC,IAAI,MAAM,GAAwB,IAAI,CAAC;IACvC,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,YAAY,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAiB,CAAC;QACpD,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,iBAAiB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,CAAC,sBAAsB,EAAE,eAAe,CAAC;gBACtD,0BAA0B,EAAE,MAAM;gBAClC,WAAW,EAAE,0BAA0B;gBACvC,KAAK,EAAE,iBAAiB;aACzB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAEjC,MAAM,YAAY,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAG7C,CAAC;QAEF,MAAM,GAAG;YACP,QAAQ,EAAE,YAAY,CAAC,SAAS;YAChC,YAAY,EAAE,YAAY,CAAC,aAAa;SACzC,CAAC;QAEF,MAAM,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,4CAAuB,CAAC;QACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,GAAG,MAAM,cAAc;QACjC,sBAAsB,EAAE,GAAG,MAAM,6BAA6B;QAC9D,KAAK,EAAE,iBAAiB;QACxB,uBAAuB,EAAE,MAAM,CAAC,YAAY;YAC1C,CAAC,CAAC,oBAAoB;YACtB,CAAC,CAAC,MAAM;KACX,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,iBAAiB,EAAE,CAAC;IAE3D,MAAM,WAAW,GAAqB;QACpC,UAAU,EAAE,OAAO,CAAC,YAAY;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI;QAChD,QAAQ,EAAE,GAAG,MAAM,cAAc;QACjC,MAAM;KACP,CAAC;IAEF,MAAM,KAAK,CAAC,GAAG,CACb,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,IAAI,EACJ,OAAO,CAAC,SAAS,CAClB,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAEtE,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAwB;IAExB,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,WAAI,EAAiB,CAAC;IAEzC,mCAAmC;IACnC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,+BAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAqB,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,KAAK,EACL,gBAAgB,EAChB,KAAK,EACL,OAAO,EACP,MAAM,CACP,CAAC;YAEF,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,KAAK,EAAE,eAAe,KAAK,2CAA2C;iBACvE,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC1C,KAAK;gBACL,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;aACxD,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,kCAAkC;IAClC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,+BAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAqB,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,+CAA+C;aACzD,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QAExD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;YACvC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,mCAAmC,EAAE,EACjE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,IAAI,4CAAuB,CAAC;gBACnD,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,sBAAsB,EAAE,GAAG,WAAW,CAAC,MAAM,6BAA6B;gBAC1E,KAAK,EAAE,iBAAiB;gBACxB,uBAAuB,EAAE,WAAW,CAAC,YAAY;oBAC/C,CAAC,CAAC,oBAAoB;oBACtB,CAAC,CAAC,MAAM;aACX,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,YAAY,CACpD,WAAW,CAAC,UAAU,EACtB,WAAW,CAAC,QAAQ,CACrB,CAAC;YAEF,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpC,4CAA4C;gBAC5C,IACE,UAAU,CAAC,QAAQ;oBACnB,UAAU,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ,EAC5C,CAAC;oBACD,WAAW,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;oBAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAClB,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EACvD,EAAE,CACH,CAAC;oBACF,MAAM,KAAK,CAAC,GAAG,CACb,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,IAAI,EACJ,GAAG,CACJ,CAAC;gBACJ,CAAC;gBACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;gBACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;YAChE,CAAC;YAED,4DAA4D;YAC5D,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC;YACnC,MAAM,UAAU,GAAqB;gBACnC,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;gBAC9B,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,QAAQ,EAAE,WAAW,CAAC,QAAQ;aAC/B,CAAC;YAEF,MAAM,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACjE,MAAM,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAEvD,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,MAAM,CAAC,GAAG,CAAC,8BAA8B,EAAE,+BAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE7B,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes/internal/files.d.ts

@@ -0,0 +1,9 @@
+#!/usr/bin/env bun
+import { Hono } from "hono";
+import type { PlatformRegistry } from "../../platform";
+import type { WorkerContext } from "./types";
+/**
+ * Create internal file routes (Hono)
+ */
+export declare function createFileRoutes(platformRegistry: PlatformRegistry): Hono<WorkerContext>;
+//# sourceMappingURL=files.d.ts.map

package/dist/routes/internal/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/routes/internal/files.ts"],"names":[],"mappings":";AAIA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAgB7C;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,gBAAgB,EAAE,gBAAgB,GACjC,IAAI,CAAC,aAAa,CAAC,CAoMrB"}