@melaya/runner 1.1.61 → 1.1.62

package/dist/localRelay.d.ts

@@ -9,6 +9,7 @@
  *   - Per-run nonce required in the URL path to prevent injection from
  *     other processes on the same machine
  */
+import http from "http";
 import type { Socket } from "socket.io-client";
 export interface LocalRelay {
     port: number;
@@ -16,4 +17,10 @@ export interface LocalRelay {
     close: () => void;
 }
 export declare function setActiveProject(project: string): void;
-export declare function startLocalRelay(socket: Socket, verbose: boolean, serverUrl?: string): Promise<LocalRelay>;
+export interface LocalRelayRoutes {
+    /** POST /vaults/op (Obsidian vault tools, protocol §2). Authenticated by the
+     *  vault capability in `Authorization: Vault <cap>`, not by the nonce: the
+     *  handler verifies it (local device vaults) or forwards it to the server. */
+    vaultOp?: (req: http.IncomingMessage, res: http.ServerResponse) => Promise<void> | void;
+}
+export declare function startLocalRelay(socket: Socket, verbose: boolean, serverUrl?: string, routes?: LocalRelayRoutes): Promise<LocalRelay>;

package/dist/localRelay.js

@@ -55,7 +55,7 @@ function _flushThrottle(socket, verbose) {
     _throttleQueue = [];
     _throttleTimer = null;
 }
-export function startLocalRelay(socket, verbose, serverUrl) {
+export function startLocalRelay(socket, verbose, serverUrl, routes = {}) {
     const nonce = crypto.randomUUID().replace(/-/g, "");
     return new Promise((resolve, reject) => {
         const expectedPath = `/events/relay/${nonce}`;
@@ -147,6 +147,26 @@ export function startLocalRelay(socket, verbose, serverUrl) {
                 });
                 return;
             }
+            // ── Obsidian vault ops (docs/plans/obsidian-vault-protocol.md §2) ──
+            if (req.method === "POST" && req.url && /^\/vaults\/op\/?(\?.*)?$/.test(req.url)) {
+                if (!routes.vaultOp) {
+                    res.writeHead(404);
+                    res.end("Not found");
+                    return;
+                }
+                Promise.resolve(routes.vaultOp(req, res)).catch(() => {
+                    if (res.headersSent) {
+                        try {
+                            res.end();
+                        }
+                        catch { /* closed */ }
+                        return;
+                    }
+                    res.writeHead(500, { "Content-Type": "application/json" });
+                    res.end('{"ok":false,"error":"relay_failed"}');
+                });
+                return;
+            }
             if (req.method !== "POST" || req.url !== expectedPath) {
                 res.writeHead(404);
                 res.end("Not found");