@mecha.im/cli 0.3.4

package/dist/src/daemon.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Mecha singleton daemon — manages fleet lifecycle with reconciliation loop.
+ *
+ * Lock: $MECHA_DIR/.daemon.lock (directory-based, same as registry lock)
+ * State: $MECHA_DIR/daemon.json (port, pid, startedAt, version, status)
+ * Logs: $MECHA_DIR/logs/daemon.log
+ */
+interface DaemonState {
+    pid: number;
+    port: number;
+    host: string;
+    startedAt: string;
+    version: string;
+    status: "starting" | "ready" | "stopping";
+}
+export declare function startDaemon(port: number, host: string, foreground: boolean): Promise<void>;
+export declare function stopDaemon(): Promise<boolean>;
+export declare function getDaemonStatus(): {
+    running: boolean;
+    state: DaemonState | null;
+};
+export declare function getDaemonUrl(): string | null;
+export declare function ensureDaemon(): Promise<string>;
+export {};
+//# sourceMappingURL=daemon.d.ts.map

package/dist/src/daemon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.d.ts","sourceRoot":"","sources":["../../src/daemon.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,UAAU,WAAW;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,CAAC;CAC3C;AA2GD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAqFhG;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAqDnD;AAED,wBAAgB,eAAe,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;CAAE,CAejF;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAU5C;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CA8BpD"}

package/dist/src/daemon.js

@@ -0,0 +1,344 @@
+/**
+ * Mecha singleton daemon — manages fleet lifecycle with reconciliation loop.
+ *
+ * Lock: $MECHA_DIR/.daemon.lock (directory-based, same as registry lock)
+ * State: $MECHA_DIR/daemon.json (port, pid, startedAt, version, status)
+ * Logs: $MECHA_DIR/logs/daemon.log
+ */
+import { mkdirSync, rmdirSync, readFileSync, writeFileSync, statSync, unlinkSync, utimesSync } from "node:fs";
+import { join } from "node:path";
+import { spawn as spawnChild } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { getMechaDir, listBots } from "./store.js";
+import { auditLog } from "./daemon-audit.js";
+import * as docker from "./docker.js";
+import { log } from "../shared/logger.js";
+const LOCK_STALE_MS = 30_000;
+const RECONCILE_INTERVAL_MS = 30_000;
+const SHUTDOWN_DRAIN_MS = 5_000;
+function lockDir() { return join(getMechaDir(), ".daemon.lock"); }
+function stateFile() { return join(getMechaDir(), "daemon.json"); }
+function readVersion() {
+    try {
+        const pkgPath = join(fileURLToPath(import.meta.url), "..", "..", "package.json");
+        return JSON.parse(readFileSync(pkgPath, "utf-8")).version ?? "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
+// ── Lock ────────────────────────────────────────────────────
+function acquireLock() {
+    try {
+        mkdirSync(lockDir());
+        return true;
+    }
+    catch {
+        // Check for stale lock
+        try {
+            const mtime = statSync(lockDir()).mtimeMs;
+            if (Date.now() - mtime > LOCK_STALE_MS) {
+                try {
+                    rmdirSync(lockDir());
+                }
+                catch {
+                    return false;
+                }
+                try {
+                    mkdirSync(lockDir());
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            }
+        }
+        catch { /* can't stat — lock doesn't exist or was removed */ }
+        return false;
+    }
+}
+function releaseLock() {
+    try {
+        rmdirSync(lockDir());
+    }
+    catch { /* ignore */ }
+}
+// ── State file ──────────────────────────────────────────────
+function writeState(state) {
+    writeFileSync(stateFile(), JSON.stringify(state, null, 2));
+}
+function readState() {
+    try {
+        return JSON.parse(readFileSync(stateFile(), "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+function removeState() {
+    try {
+        unlinkSync(stateFile());
+    }
+    catch { /* ok */ }
+}
+// ── Reconciler ──────────────────────────────────────────────
+async function reconcile() {
+    try {
+        const bots = listBots();
+        const containers = await docker.list();
+        const containerMap = new Map(containers.map(c => [c.name, c]));
+        for (const [name, entry] of Object.entries(bots)) {
+            const desired = entry.desired_state ?? "running"; // default: running for backward compat
+            const container = containerMap.get(name);
+            if (desired === "running") {
+                if (!container || container.status === "exited") {
+                    // Bot should be running but isn't — auto-restart
+                    try {
+                        await docker.start(name);
+                        auditLog({ actor: "daemon:reconciler", action: "auto-restart", target: name,
+                            detail: { reason: container ? "container exited" : "container missing" }, result: "success" });
+                    }
+                    catch (err) {
+                        auditLog({ actor: "daemon:reconciler", action: "auto-restart", target: name,
+                            detail: { error: err instanceof Error ? err.message : String(err) }, result: "failure" });
+                    }
+                }
+            }
+            else if (desired === "stopped") {
+                if (container && container.status === "running") {
+                    // Drift: running but should be stopped — stop it
+                    try {
+                        await docker.stop(name);
+                        auditLog({ actor: "daemon:reconciler", action: "auto-stop", target: name,
+                            detail: { reason: "desired_state=stopped but container running" }, result: "success" });
+                    }
+                    catch (err) {
+                        auditLog({ actor: "daemon:reconciler", action: "auto-stop", target: name,
+                            detail: { error: err instanceof Error ? err.message : String(err) }, result: "failure" });
+                    }
+                }
+            }
+        }
+        // Check for orphan containers
+        for (const container of containers) {
+            if (!bots[container.name]) {
+                auditLog({ actor: "daemon:reconciler", action: "orphan-detected", target: container.name,
+                    detail: { containerId: container.containerId }, result: "skipped" });
+            }
+        }
+    }
+    catch (err) {
+        log.warn("Reconciler error", { error: err instanceof Error ? err.message : String(err) });
+    }
+}
+// ── Daemon start/stop ───────────────────────────────────────
+let reconcileTimer = null;
+let shuttingDown = false;
+export async function startDaemon(port, host, foreground) {
+    mkdirSync(join(getMechaDir(), "logs"), { recursive: true });
+    if (!acquireLock()) {
+        const state = readState();
+        if (state) {
+            console.log(`Daemon already running on http://${host === "0.0.0.0" ? "localhost" : host}:${state.port} (PID ${state.pid})`);
+        }
+        else {
+            console.error("Another daemon instance is running (lock held). Use 'mecha daemon stop' first.");
+        }
+        process.exit(1);
+    }
+    // Write initial state
+    writeState({
+        pid: process.pid,
+        port,
+        host,
+        startedAt: new Date().toISOString(),
+        version: readVersion(),
+        status: "starting",
+    });
+    // Start HTTP server (retain handle for graceful shutdown)
+    const { startDashboardServer } = await import("./dashboard-server.js");
+    const serverHandle = startDashboardServer(port, host);
+    // Update state to ready
+    writeState({
+        pid: process.pid,
+        port,
+        host,
+        startedAt: new Date().toISOString(),
+        version: readVersion(),
+        status: "ready",
+    });
+    // Start reconciler
+    reconcileTimer = setInterval(reconcile, RECONCILE_INTERVAL_MS);
+    // Refresh lock mtime to prevent stale detection by other processes
+    const lockRefreshTimer = setInterval(() => {
+        try {
+            const now = new Date();
+            utimesSync(lockDir(), now, now);
+        }
+        catch { /* lock dir may be gone during shutdown */ }
+    }, LOCK_STALE_MS / 3); // refresh at 1/3 of stale threshold
+    auditLog({ actor: "daemon:lifecycle", action: "started", detail: { port, host, pid: process.pid }, result: "success" });
+    console.log(`Daemon running on http://${host === "0.0.0.0" ? "localhost" : host}:${port} (PID ${process.pid})`);
+    // Signal handling
+    let sigCount = 0;
+    const shutdown = async () => {
+        sigCount++;
+        if (sigCount > 1) {
+            console.log("Force shutdown");
+            process.exit(1);
+        }
+        if (shuttingDown)
+            return;
+        shuttingDown = true;
+        console.log("Shutting down daemon...");
+        writeState({ ...readState(), status: "stopping" });
+        if (reconcileTimer) {
+            clearInterval(reconcileTimer);
+            reconcileTimer = null;
+        }
+        clearInterval(lockRefreshTimer);
+        // Stop accepting new connections and drain existing ones
+        try {
+            serverHandle.close();
+        }
+        catch { /* may already be closed */ }
+        await new Promise(r => setTimeout(r, SHUTDOWN_DRAIN_MS));
+        auditLog({ actor: "daemon:lifecycle", action: "stopped", result: "success" });
+        removeState();
+        releaseLock();
+        process.exit(0);
+    };
+    process.on("SIGTERM", shutdown);
+    process.on("SIGINT", shutdown);
+    if (!foreground) {
+        // Background mode: detach from terminal
+        process.stdin.unref?.();
+    }
+}
+export async function stopDaemon() {
+    const state = readState();
+    if (!state || state.status === "stopping") {
+        console.log("Daemon is not running.");
+        return false;
+    }
+    // Verify the process is alive AND matches our start time (prevents PID reuse)
+    try {
+        process.kill(state.pid, 0);
+        // Extra check: verify the daemon.json still has matching startedAt
+        const freshState = readState();
+        if (!freshState || freshState.startedAt !== state.startedAt) {
+            console.log("Daemon state is stale — cleaning up.");
+            removeState();
+            releaseLock();
+            return true;
+        }
+    }
+    catch {
+        console.log("Daemon process not found — cleaning up stale state.");
+        removeState();
+        releaseLock();
+        return true;
+    }
+    // Send SIGTERM
+    try {
+        process.kill(state.pid, "SIGTERM");
+        console.log(`Sent SIGTERM to daemon (PID ${state.pid})`);
+    }
+    catch {
+        removeState();
+        releaseLock();
+        return true;
+    }
+    // Wait for shutdown (max 10s)
+    for (let i = 0; i < 20; i++) {
+        await new Promise(r => setTimeout(r, 500));
+        try {
+            process.kill(state.pid, 0);
+        }
+        catch {
+            break;
+        } // process gone
+    }
+    // Verify cleanup
+    try {
+        process.kill(state.pid, 0);
+    }
+    catch {
+        console.log("Daemon stopped.");
+        return true;
+    }
+    // Force kill
+    console.log("Daemon did not stop gracefully — sending SIGKILL");
+    try {
+        process.kill(state.pid, "SIGKILL");
+    }
+    catch { /* already gone */ }
+    removeState();
+    releaseLock();
+    return true;
+}
+export function getDaemonStatus() {
+    const state = readState();
+    if (!state)
+        return { running: false, state: null };
+    // Verify process is alive AND matches our recorded start time (prevents PID reuse)
+    try {
+        process.kill(state.pid, 0);
+        // Cross-check: re-read state to confirm it hasn't been replaced
+        const freshState = readState();
+        if (!freshState || freshState.startedAt !== state.startedAt || freshState.pid !== state.pid) {
+            return { running: false, state };
+        }
+        return { running: true, state };
+    }
+    catch {
+        return { running: false, state };
+    }
+}
+export function getDaemonUrl() {
+    // 1. Env var override
+    if (process.env.MECHA_URL)
+        return process.env.MECHA_URL;
+    // 2. Read state file
+    const state = readState();
+    if (state && state.status === "ready") {
+        const h = (state.host === "0.0.0.0") ? "localhost" : state.host;
+        try {
+            process.kill(state.pid, 0);
+            return `http://${h}:${state.port}`;
+        }
+        catch { /* stale */ }
+    }
+    return null;
+}
+export async function ensureDaemon() {
+    const url = getDaemonUrl();
+    if (url) {
+        // Verify alive
+        try {
+            const r = await fetch(`${url}/api/health`, { signal: AbortSignal.timeout(2000) });
+            if (r.ok)
+                return url;
+        }
+        catch { /* stale */ }
+    }
+    // Auto-start in background
+    const cliPath = join(fileURLToPath(import.meta.url), "..", "cli.js");
+    const child = spawnChild(process.execPath, [cliPath, "daemon", "start", "--background"], {
+        detached: true,
+        stdio: "ignore",
+        env: { ...process.env },
+    });
+    child.unref();
+    // Wait for daemon to become ready (max 10s)
+    for (let i = 0; i < 20; i++) {
+        await new Promise(r => setTimeout(r, 500));
+        const state = readState();
+        if (state?.status === "ready") {
+            const h = (state.host === "0.0.0.0") ? "localhost" : (state.host || "localhost");
+            return `http://${h}:${state.port}`;
+        }
+    }
+    throw new Error("Failed to auto-start daemon. Run 'mecha daemon start' manually.");
+}
+//# sourceMappingURL=daemon.js.map

package/dist/src/daemon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon.js","sourceRoot":"","sources":["../../src/daemon.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9G,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAE1C,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAWhC,SAAS,OAAO,KAAa,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;AAC1E,SAAS,SAAS,KAAa,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;AAE3E,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,+DAA+D;AAE/D,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;QACvB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,aAAa,EAAE,CAAC;gBACvC,IAAI,CAAC;oBAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;gBACrD,IAAI,CAAC;oBAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,KAAK,CAAC;gBAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,oDAAoD,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AACtD,CAAC;AAED,+DAA+D;AAE/D,SAAS,UAAU,CAAC,KAAkB;IACpC,aAAa,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS;IAChB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,CAAC;QAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED,+DAA+D;AAE/D,KAAK,UAAU,SAAS;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC,uCAAuC;YACzF,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAChD,iDAAiD;oBACjD,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBACzB,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI;4BACzE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;oBACnG,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI;4BACzE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC9F,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjC,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChD,iDAAiD;oBACjD,IAAI,CAAC;wBACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACxB,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI;4BACtE,MAAM,EAAE,EAAE,MAAM,EAAE,6CAA6C,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC5F,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI;4BACtE,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC9F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI;oBACtF,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,+DAA+D;AAE/D,IAAI,cAAc,GAA0C,IAAI,CAAC;AACjE,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,UAAmB;IAC/E,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;QAC9H,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sBAAsB;IACtB,UAAU,CAAC;QACT,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,WAAW,EAAE;QACtB,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtD,wBAAwB;IACxB,UAAU,CAAC;QACT,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,IAAI;QACJ,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,WAAW,EAAE;QACtB,MAAM,EAAE,OAAO;KAChB,CAAC,CAAC;IAEH,mBAAmB;IACnB,cAAc,GAAG,WAAW,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAE/D,mEAAmE;IACnE,MAAM,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACxD,CAAC,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,oCAAoC;IAE3D,QAAQ,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACxH,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,SAAS,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IAEhH,kBAAkB;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,QAAQ,EAAE,CAAC;QACX,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QAEpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,UAAU,CAAC,EAAE,GAAG,SAAS,EAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEpD,IAAI,cAAc,EAAE,CAAC;YAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YAAC,cAAc,GAAG,IAAI,CAAC;QAAC,CAAC;QAC7E,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAEhC,yDAAyD;QACzD,IAAI,CAAC;YAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QACnE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAEzD,QAAQ,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9E,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAE/B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,wCAAwC;QACxC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3B,mEAAmE;QACnE,MAAM,UAAU,GAAG,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;YACpD,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe;IACf,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM;QAAC,CAAC,CAAC,eAAe;IACtE,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,aAAa;IACb,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,IAAI,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACxE,WAAW,EAAE,CAAC;IACd,WAAW,EAAE,CAAC;IACd,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACnD,mFAAmF;IACnF,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3B,gEAAgE;QAChE,MAAM,UAAU,GAAG,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACnC,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,sBAAsB;IACtB,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACxD,qBAAqB;IACrB,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAChE,IAAI,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAAC,OAAO,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,GAAG,EAAE,CAAC;QACR,eAAe;QACf,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO,GAAG,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IAED,2BAA2B;IAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE;QACvF,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;KACxB,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,4CAA4C;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,IAAI,KAAK,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,WAAW,CAAC,CAAC;YACjF,OAAO,UAAU,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AACrF,CAAC"}

package/dist/src/dashboard-server-schema.d.ts

@@ -0,0 +1,23 @@
+import { z } from "zod";
+/** Legacy single token — only used as bearer token for programmatic access */
+export declare const DASHBOARD_TOKEN: string;
+export declare const DASHBOARD_COOKIE = "mecha_dashboard_session";
+export declare function createSession(): string;
+export declare function isValidSession(token: string): boolean;
+export declare function revokeAllSessions(): void;
+export declare const HOP_BY_HOP: Set<string>;
+export declare const spawnBodySchema: z.ZodObject<{
+    config_path: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    system: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    dir: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const authBodySchema: z.ZodObject<{
+    profile: z.ZodString;
+    key: z.ZodString;
+}, z.core.$strip>;
+export declare const totpVerifySchema: z.ZodObject<{
+    code: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=dashboard-server-schema.d.ts.map

package/dist/src/dashboard-server-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-server-schema.d.ts","sourceRoot":"","sources":["../../src/dashboard-server-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,eAAO,MAAM,eAAe,QAAyF,CAAC;AACtH,eAAO,MAAM,gBAAgB,4BAA4B,CAAC;AAM1D,wBAAgB,aAAa,IAAI,MAAM,CAItC;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQrD;AAED,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,eAAO,MAAM,UAAU,aAGrB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;iBAM1B,CAAC;AAEH,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC"}

package/dist/src/dashboard-server-schema.js

@@ -0,0 +1,45 @@
+import { randomBytes } from "node:crypto";
+import { z } from "zod";
+/** Legacy single token — only used as bearer token for programmatic access */
+export const DASHBOARD_TOKEN = process.env.MECHA_DASHBOARD_TOKEN || ("mecha_dash_" + randomBytes(24).toString("hex"));
+export const DASHBOARD_COOKIE = "mecha_dashboard_session";
+/** Per-session token store with TTL */
+const SESSION_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
+const activeSessions = new Map();
+export function createSession() {
+    const token = "sess_" + randomBytes(32).toString("hex");
+    activeSessions.set(token, { createdAt: Date.now() });
+    return token;
+}
+export function isValidSession(token) {
+    const session = activeSessions.get(token);
+    if (!session)
+        return false;
+    if (Date.now() - session.createdAt > SESSION_TTL_MS) {
+        activeSessions.delete(token);
+        return false;
+    }
+    return true;
+}
+export function revokeAllSessions() {
+    activeSessions.clear();
+}
+export const HOP_BY_HOP = new Set([
+    "connection", "keep-alive", "proxy-authenticate", "proxy-authorization",
+    "te", "trailers", "transfer-encoding", "upgrade", "host",
+]);
+export const spawnBodySchema = z.object({
+    config_path: z.string().optional(),
+    name: z.string().min(1).max(32).optional(),
+    system: z.string().min(1).optional(),
+    model: z.string().optional(),
+    dir: z.string().optional(),
+});
+export const authBodySchema = z.object({
+    profile: z.string().min(1).max(32),
+    key: z.string().min(1),
+});
+export const totpVerifySchema = z.object({
+    code: z.string().length(6).regex(/^\d{6}$/),
+});
+//# sourceMappingURL=dashboard-server-schema.js.map

package/dist/src/dashboard-server-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-server-schema.js","sourceRoot":"","sources":["../../src/dashboard-server-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACtH,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAE1D,uCAAuC;AACvC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW;AACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAiC,CAAC;AAEhE,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxD,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,cAAc,EAAE,CAAC;QACpD,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IAChC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB;IACvE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM;CACzD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;CAC5C,CAAC,CAAC"}

package/dist/src/dashboard-server-utils.d.ts

@@ -0,0 +1,18 @@
+import type { Context } from "hono";
+/** Check if a bot is currently busy by querying its /api/status endpoint.
+ *  Returns `unknown: true` if status could not be determined (bot unreachable). */
+export declare function checkBotBusy(name: string): Promise<{
+    busy: boolean;
+    unknown?: boolean;
+    state?: string;
+}>;
+export declare function safeError(c: Context, err: unknown): (Response & import("hono").TypedResponse<{
+    error: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    error: string;
+}, 500, "json">);
+export declare function dashboardSessionCookie(sessionToken?: string): string;
+export declare function hasDashboardAccess(c: Context): boolean;
+export declare function shouldBootstrapDashboardSession(c: Context): boolean;
+export declare function guardBusy(c: Context, name: string, extra?: Record<string, unknown>): Promise<Response | null>;
+//# sourceMappingURL=dashboard-server-utils.d.ts.map

package/dist/src/dashboard-server-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-server-utils.d.ts","sourceRoot":"","sources":["../../src/dashboard-server-utils.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC;mFACmF;AACnF,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB9G;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO;;;;iBAMjD;AAcD,wBAAgB,sBAAsB,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpE;AASD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAStD;AAED,wBAAgB,+BAA+B,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAUnE;AAED,wBAAsB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAanH"}

package/dist/src/dashboard-server-utils.js

@@ -0,0 +1,107 @@
+import { timingSafeEqual } from "node:crypto";
+import { listBots as listRegistered, getTotpSecret } from "./store.js";
+import { resolveHostBotBaseUrl } from "./resolve-endpoint.js";
+import { MechaError } from "../shared/errors.js";
+import { log } from "../shared/logger.js";
+import { DASHBOARD_TOKEN, DASHBOARD_COOKIE, isValidSession, createSession } from "./dashboard-server-schema.js";
+/** Check if a bot is currently busy by querying its /api/status endpoint.
+ *  Returns `unknown: true` if status could not be determined (bot unreachable). */
+export async function checkBotBusy(name) {
+    try {
+        const resolved = await resolveHostBotBaseUrl(name, { allowRemote: false });
+        if (!resolved)
+            return { busy: false, unknown: true, state: "unreachable" };
+        const botEntry = listRegistered()[name];
+        const headers = {};
+        if (botEntry?.botToken)
+            headers["Authorization"] = `Bearer ${botEntry.botToken}`;
+        const resp = await fetch(`${resolved.baseUrl}/api/status`, {
+            headers,
+            signal: AbortSignal.timeout(3000),
+        });
+        if (!resp.ok)
+            return { busy: false, unknown: true, state: "unreachable" };
+        const status = await resp.json();
+        const busyStates = ["thinking", "calling", "scheduled", "webhook"];
+        return { busy: busyStates.includes(status.state ?? ""), state: status.state };
+    }
+    catch {
+        return { busy: false, unknown: true, state: "unreachable" };
+    }
+}
+export function safeError(c, err) {
+    log.error("Dashboard API error", { error: err instanceof Error ? err.message : String(err) });
+    if (err instanceof MechaError) {
+        return c.json({ error: err.message }, err.statusCode);
+    }
+    return c.json({ error: "Internal server error" }, 500);
+}
+function readCookie(cookieHeader, name) {
+    if (!cookieHeader)
+        return undefined;
+    const cookies = cookieHeader.split(";").map((part) => part.trim());
+    for (const cookie of cookies) {
+        const eq = cookie.indexOf("=");
+        if (eq === -1)
+            continue;
+        const key = cookie.slice(0, eq).trim();
+        if (key === name)
+            return cookie.slice(eq + 1);
+    }
+    return undefined;
+}
+export function dashboardSessionCookie(sessionToken) {
+    const token = sessionToken ?? createSession();
+    return `${DASHBOARD_COOKIE}=${token}; Path=/; HttpOnly; SameSite=Lax; Secure; Max-Age=86400`;
+}
+function constantTimeEquals(a, b) {
+    const bufA = Buffer.from(a);
+    const bufB = Buffer.from(b);
+    if (bufA.length !== bufB.length)
+        return false;
+    return timingSafeEqual(bufA, bufB);
+}
+export function hasDashboardAccess(c) {
+    // Bearer token (programmatic access) — check legacy single token
+    const auth = c.req.header("authorization");
+    if (auth && constantTimeEquals(auth, `Bearer ${DASHBOARD_TOKEN}`))
+        return true;
+    // Session cookie — check per-session store first, then legacy token
+    const cookie = readCookie(c.req.header("cookie"), DASHBOARD_COOKIE);
+    if (!cookie)
+        return false;
+    if (isValidSession(cookie))
+        return true;
+    return constantTimeEquals(cookie, DASHBOARD_TOKEN);
+}
+export function shouldBootstrapDashboardSession(c) {
+    if (!(c.req.method === "GET" || c.req.method === "HEAD"))
+        return false;
+    if (c.req.path.startsWith("/api/"))
+        return false;
+    // When TOTP is enabled, always require login
+    if (getTotpSecret())
+        return false;
+    // When TOTP is disabled, only auto-bootstrap for loopback clients
+    const remoteAddr = c.req.header("x-forwarded-for") ?? c.req.header("remote-addr") ?? "";
+    const isLoopback = !remoteAddr || remoteAddr === "127.0.0.1" || remoteAddr === "::1" || remoteAddr === "localhost";
+    if (!isLoopback)
+        return false;
+    return readCookie(c.req.header("cookie"), DASHBOARD_COOKIE) !== DASHBOARD_TOKEN;
+}
+export async function guardBusy(c, name, extra) {
+    const force = c.req.query("force") === "true";
+    if (force)
+        return null;
+    const { busy, unknown, state } = await checkBotBusy(name);
+    if (busy || unknown) {
+        return c.json({
+            error: unknown ? "Bot status unknown — use force=true to proceed" : "Bot is busy",
+            code: unknown ? "BOT_STATUS_UNKNOWN" : "BOT_BUSY",
+            state,
+            ...extra,
+        }, 409);
+    }
+    return null;
+}
+//# sourceMappingURL=dashboard-server-utils.js.map

package/dist/src/dashboard-server-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-server-utils.js","sourceRoot":"","sources":["../../src/dashboard-server-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAGhH;mFACmF;AACnF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,IAAI,QAAQ,EAAE,QAAQ;YAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,aAAa,EAAE;YACzD,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAwB,CAAC;QACvD,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAU,EAAE,GAAY;IAChD,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;QAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,UAAiB,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,YAAgC,EAAE,IAAY;IAChE,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,YAAqB;IAC1D,MAAM,KAAK,GAAG,YAAY,IAAI,aAAa,EAAE,CAAC;IAC9C,OAAO,GAAG,gBAAgB,IAAI,KAAK,yDAAyD,CAAC;AAC/F,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,iEAAiE;IACjE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,IAAI,IAAI,kBAAkB,CAAC,IAAI,EAAE,UAAU,eAAe,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,oEAAoE;IACpE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,CAAU;IACxD,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,6CAA6C;IAC7C,IAAI,aAAa,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,kEAAkE;IAClE,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IACxF,MAAM,UAAU,GAAG,CAAC,UAAU,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,WAAW,CAAC;IACnH,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,KAAK,eAAe,CAAC;AAClF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,CAAU,EAAE,IAAY,EAAE,KAA+B;IACvF,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;IAC9C,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,aAAa;YACjF,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU;YACjD,KAAK;YACL,GAAG,KAAK;SACT,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/dashboard-server.d.ts

@@ -0,0 +1,2 @@
+export declare function startDashboardServer(port: number, host?: string): import("@hono/node-server").ServerType;
+//# sourceMappingURL=dashboard-server.d.ts.map

package/dist/src/dashboard-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard-server.d.ts","sourceRoot":"","sources":["../../src/dashboard-server.ts"],"names":[],"mappings":"AAyBA,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,0CAswB/D"}