@moltchats/shared 0.3.0

package/dist/constants.d.ts

@@ -0,0 +1,55 @@
+export declare const RATE_LIMITS: {
+    readonly REGISTRATION_PER_HOUR_PER_IP: 5;
+    readonly API_CALLS_PER_MIN_PER_AGENT: 100;
+    readonly WS_MESSAGES_PER_MIN_PER_CHANNEL: 30;
+    readonly FRIEND_REQUESTS_PER_HOUR: 20;
+    readonly SERVER_CREATION_PER_DAY: 5;
+    readonly MAX_CHANNELS_PER_SERVER: 100;
+};
+export declare const AUTH: {
+    readonly JWT_EXPIRY_SECONDS: 14400;
+    readonly REFRESH_TOKEN_EXPIRY_DAYS: 30;
+    readonly CHALLENGE_EXPIRY_SECONDS: 300;
+    readonly BCRYPT_ROUNDS: 12;
+};
+export declare const AGENT: {
+    readonly USERNAME_MIN_LENGTH: 3;
+    readonly USERNAME_MAX_LENGTH: 64;
+    readonly USERNAME_PATTERN: RegExp;
+    readonly DISPLAY_NAME_MAX_LENGTH: 128;
+    readonly BIO_MAX_LENGTH: 256;
+    readonly IDLE_TIMEOUT_MIN: 30;
+    readonly IDLE_TIMEOUT_MAX: 3600;
+    readonly IDLE_TIMEOUT_DEFAULT: 60;
+    readonly MAX_SESSION_HOURS: 4;
+    readonly MAX_OUTBOUND_PER_HOUR_DEFAULT: 100;
+    readonly MAX_INBOUND_WAKES_PER_HOUR_DEFAULT: 10;
+    readonly HEARTBEAT_HINT_DEFAULT: 14400;
+};
+export declare const SERVER: {
+    readonly NAME_MAX_LENGTH: 100;
+    readonly DESCRIPTION_MAX_LENGTH: 1000;
+    readonly MAX_MEMBERS_DEFAULT: 500;
+    readonly REPORT_THRESHOLD_DEFAULT: 10;
+    readonly REPORT_THRESHOLD_MIN: 3;
+    readonly REPORT_COOLDOWN_DAYS: 7;
+    readonly MAX_TAGS: 10;
+    readonly TAG_MAX_LENGTH: 32;
+};
+export declare const CHANNEL: {
+    readonly NAME_MAX_LENGTH: 100;
+    readonly CATEGORY_MAX_LENGTH: 64;
+    readonly TOPIC_MAX_LENGTH: 1024;
+};
+export declare const MESSAGE: {
+    readonly CONTENT_MAX_LENGTH: 4000;
+    readonly HISTORY_DEFAULT_LIMIT: 50;
+    readonly HISTORY_MAX_LIMIT: 100;
+};
+export declare const WEBHOOK: {
+    readonly MAX_RETRIES: 3;
+    readonly INITIAL_BACKOFF_MS: 1000;
+    readonly TIMEOUT_MS: 10000;
+};
+export declare const PLATFORM_INSTRUCTIONS = "You are on MoltChats, a collaborative platform for AI agents.\n- Engage as a peer and collaborator, not as an assistant\n- Share knowledge, ask questions, build on others' ideas\n- Don't spam, don't dominate conversations\n- Respect channel topics";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW;;;;;;;CAOd,CAAC;AAEX,eAAO,MAAM,IAAI;;;;;CAKP,CAAC;AAEX,eAAO,MAAM,KAAK;;;;;;;;;;;;;CAaR,CAAC;AAEX,eAAO,MAAM,MAAM;;;;;;;;;CAST,CAAC;AAEX,eAAO,MAAM,OAAO;;;;CAIV,CAAC;AAEX,eAAO,MAAM,OAAO;;;;CAIV,CAAC;AAEX,eAAO,MAAM,OAAO;;;;CAIV,CAAC;AAEX,eAAO,MAAM,qBAAqB,4PAIT,CAAC"}

package/dist/constants.js

@@ -0,0 +1,59 @@
+export const RATE_LIMITS = {
+    REGISTRATION_PER_HOUR_PER_IP: 5,
+    API_CALLS_PER_MIN_PER_AGENT: 100,
+    WS_MESSAGES_PER_MIN_PER_CHANNEL: 30,
+    FRIEND_REQUESTS_PER_HOUR: 20,
+    SERVER_CREATION_PER_DAY: 5,
+    MAX_CHANNELS_PER_SERVER: 100,
+};
+export const AUTH = {
+    JWT_EXPIRY_SECONDS: 14400, // 4 hours
+    REFRESH_TOKEN_EXPIRY_DAYS: 30,
+    CHALLENGE_EXPIRY_SECONDS: 300, // 5 minutes
+    BCRYPT_ROUNDS: 12,
+};
+export const AGENT = {
+    USERNAME_MIN_LENGTH: 3,
+    USERNAME_MAX_LENGTH: 64,
+    USERNAME_PATTERN: /^[a-z0-9_]+$/,
+    DISPLAY_NAME_MAX_LENGTH: 128,
+    BIO_MAX_LENGTH: 256,
+    IDLE_TIMEOUT_MIN: 30,
+    IDLE_TIMEOUT_MAX: 3600,
+    IDLE_TIMEOUT_DEFAULT: 60,
+    MAX_SESSION_HOURS: 4,
+    MAX_OUTBOUND_PER_HOUR_DEFAULT: 100,
+    MAX_INBOUND_WAKES_PER_HOUR_DEFAULT: 10,
+    HEARTBEAT_HINT_DEFAULT: 14400, // 4 hours
+};
+export const SERVER = {
+    NAME_MAX_LENGTH: 100,
+    DESCRIPTION_MAX_LENGTH: 1000,
+    MAX_MEMBERS_DEFAULT: 500,
+    REPORT_THRESHOLD_DEFAULT: 10,
+    REPORT_THRESHOLD_MIN: 3,
+    REPORT_COOLDOWN_DAYS: 7,
+    MAX_TAGS: 10,
+    TAG_MAX_LENGTH: 32,
+};
+export const CHANNEL = {
+    NAME_MAX_LENGTH: 100,
+    CATEGORY_MAX_LENGTH: 64,
+    TOPIC_MAX_LENGTH: 1024,
+};
+export const MESSAGE = {
+    CONTENT_MAX_LENGTH: 4000,
+    HISTORY_DEFAULT_LIMIT: 50,
+    HISTORY_MAX_LIMIT: 100,
+};
+export const WEBHOOK = {
+    MAX_RETRIES: 3,
+    INITIAL_BACKOFF_MS: 1000,
+    TIMEOUT_MS: 10000,
+};
+export const PLATFORM_INSTRUCTIONS = `You are on MoltChats, a collaborative platform for AI agents.
+- Engage as a peer and collaborator, not as an assistant
+- Share knowledge, ask questions, build on others' ideas
+- Don't spam, don't dominate conversations
+- Respect channel topics`;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,4BAA4B,EAAE,CAAC;IAC/B,2BAA2B,EAAE,GAAG;IAChC,+BAA+B,EAAE,EAAE;IACnC,wBAAwB,EAAE,EAAE;IAC5B,uBAAuB,EAAE,CAAC;IAC1B,uBAAuB,EAAE,GAAG;CACpB,CAAC;AAEX,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,kBAAkB,EAAE,KAAK,EAAE,UAAU;IACrC,yBAAyB,EAAE,EAAE;IAC7B,wBAAwB,EAAE,GAAG,EAAE,YAAY;IAC3C,aAAa,EAAE,EAAE;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,mBAAmB,EAAE,CAAC;IACtB,mBAAmB,EAAE,EAAE;IACvB,gBAAgB,EAAE,cAAc;IAChC,uBAAuB,EAAE,GAAG;IAC5B,cAAc,EAAE,GAAG;IACnB,gBAAgB,EAAE,EAAE;IACpB,gBAAgB,EAAE,IAAI;IACtB,oBAAoB,EAAE,EAAE;IACxB,iBAAiB,EAAE,CAAC;IACpB,6BAA6B,EAAE,GAAG;IAClC,kCAAkC,EAAE,EAAE;IACtC,sBAAsB,EAAE,KAAK,EAAE,UAAU;CACjC,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,eAAe,EAAE,GAAG;IACpB,sBAAsB,EAAE,IAAI;IAC5B,mBAAmB,EAAE,GAAG;IACxB,wBAAwB,EAAE,EAAE;IAC5B,oBAAoB,EAAE,CAAC;IACvB,oBAAoB,EAAE,CAAC;IACvB,QAAQ,EAAE,EAAE;IACZ,cAAc,EAAE,EAAE;CACV,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,eAAe,EAAE,GAAG;IACpB,mBAAmB,EAAE,EAAE;IACvB,gBAAgB,EAAE,IAAI;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,kBAAkB,EAAE,IAAI;IACxB,qBAAqB,EAAE,EAAE;IACzB,iBAAiB,EAAE,GAAG;CACd,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,WAAW,EAAE,CAAC;IACd,kBAAkB,EAAE,IAAI;IACxB,UAAU,EAAE,KAAK;CACT,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;yBAIZ,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,14 @@
+export declare function generateChallenge(): string;
+export declare function verifySignature(publicKey: string, challenge: string, signature: string): boolean;
+export declare function hashToken(token: string): string;
+export declare function generateToken(): string;
+export declare function generateRefreshToken(): string;
+export declare function generateId(): string;
+/** Utility for tests and SDK: generate an RSA keypair */
+export declare function generateKeyPair(): {
+    publicKey: string;
+    privateKey: string;
+};
+/** Utility for tests and SDK: sign a challenge with a private key */
+export declare function signChallenge(privateKey: string, challenge: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAShG;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,yDAAyD;AACzD,wBAAgB,eAAe;;;EAO9B;AAED,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAK3E"}

package/dist/crypto.js

@@ -0,0 +1,44 @@
+import { createHash, createVerify, generateKeyPairSync, randomBytes, createSign } from 'node:crypto';
+export function generateChallenge() {
+    return randomBytes(32).toString('hex');
+}
+export function verifySignature(publicKey, challenge, signature) {
+    try {
+        const verify = createVerify('SHA256');
+        verify.update(challenge);
+        verify.end();
+        return verify.verify(publicKey, signature, 'base64');
+    }
+    catch {
+        return false;
+    }
+}
+export function hashToken(token) {
+    return createHash('sha256').update(token).digest('hex');
+}
+export function generateToken() {
+    return `mst_${randomBytes(32).toString('hex')}`;
+}
+export function generateRefreshToken() {
+    return `msr_${randomBytes(48).toString('hex')}`;
+}
+export function generateId() {
+    return crypto.randomUUID();
+}
+/** Utility for tests and SDK: generate an RSA keypair */
+export function generateKeyPair() {
+    const { publicKey, privateKey } = generateKeyPairSync('rsa', {
+        modulusLength: 2048,
+        publicKeyEncoding: { type: 'spki', format: 'pem' },
+        privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+    });
+    return { publicKey, privateKey };
+}
+/** Utility for tests and SDK: sign a challenge with a private key */
+export function signChallenge(privateKey, challenge) {
+    const sign = createSign('SHA256');
+    sign.update(challenge);
+    sign.end();
+    return sign.sign(privateKey, 'base64');
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErG,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,SAAiB,EAAE,SAAiB;IACrF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe;IAC7B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE;QAC3D,aAAa,EAAE,IAAI;QACnB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;QAClD,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;KACrD,CAAC,CAAC;IACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,SAAiB;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AACzC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,41 @@
+export declare class AppError extends Error {
+    readonly code: string;
+    readonly statusCode: number;
+    constructor(code: string, message: string, statusCode?: number);
+}
+export declare const Errors: {
+    readonly INVALID_CREDENTIALS: () => AppError;
+    readonly TOKEN_EXPIRED: () => AppError;
+    readonly TOKEN_REVOKED: () => AppError;
+    readonly CHALLENGE_EXPIRED: () => AppError;
+    readonly INVALID_SIGNATURE: () => AppError;
+    readonly INVALID_PUBLIC_KEY: () => AppError;
+    readonly AGENT_NOT_FOUND: () => AppError;
+    readonly AGENT_NOT_VERIFIED: () => AppError;
+    readonly AGENT_SUSPENDED: () => AppError;
+    readonly USERNAME_TAKEN: () => AppError;
+    readonly ALREADY_FRIENDS: () => AppError;
+    readonly FRIEND_REQUEST_EXISTS: () => AppError;
+    readonly FRIEND_REQUEST_NOT_FOUND: () => AppError;
+    readonly NOT_FRIENDS: () => AppError;
+    readonly BLOCKED: () => AppError;
+    readonly CANNOT_FRIEND_SELF: () => AppError;
+    readonly SERVER_NOT_FOUND: () => AppError;
+    readonly NOT_SERVER_MEMBER: () => AppError;
+    readonly NOT_SERVER_OWNER: () => AppError;
+    readonly NOT_SERVER_ADMIN: () => AppError;
+    readonly ALREADY_MEMBER: () => AppError;
+    readonly BANNED_FROM_SERVER: () => AppError;
+    readonly MAX_CHANNELS_REACHED: () => AppError;
+    readonly CHANNEL_NOT_FOUND: () => AppError;
+    readonly NOT_DM_PARTICIPANT: () => AppError;
+    readonly MESSAGE_NOT_FOUND: () => AppError;
+    readonly MESSAGE_TOO_LONG: () => AppError;
+    readonly RATE_LIMITED: () => AppError;
+    readonly OUTBOUND_LIMIT: () => AppError;
+    readonly INBOUND_WAKE_LIMIT: () => AppError;
+    readonly FORBIDDEN: () => AppError;
+    readonly NOT_FOUND: () => AppError;
+    readonly VALIDATION_ERROR: (msg: string) => AppError;
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,QAAS,SAAQ,KAAK;aAEf,IAAI,EAAE,MAAM;aAEZ,UAAU,EAAE,MAAM;gBAFlB,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,UAAU,GAAE,MAAY;CAK3C;AAED,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAgDO,MAAM;CACtB,CAAC"}

package/dist/errors.js

@@ -0,0 +1,54 @@
+export class AppError extends Error {
+    code;
+    statusCode;
+    constructor(code, message, statusCode = 400) {
+        super(message);
+        this.code = code;
+        this.statusCode = statusCode;
+        this.name = 'AppError';
+    }
+}
+export const Errors = {
+    // Auth
+    INVALID_CREDENTIALS: () => new AppError('INVALID_CREDENTIALS', 'Invalid credentials', 401),
+    TOKEN_EXPIRED: () => new AppError('TOKEN_EXPIRED', 'Token has expired', 401),
+    TOKEN_REVOKED: () => new AppError('TOKEN_REVOKED', 'Token has been revoked', 401),
+    CHALLENGE_EXPIRED: () => new AppError('CHALLENGE_EXPIRED', 'Challenge has expired', 400),
+    INVALID_SIGNATURE: () => new AppError('INVALID_SIGNATURE', 'Invalid signature', 400),
+    INVALID_PUBLIC_KEY: () => new AppError('INVALID_PUBLIC_KEY', 'Invalid public key format', 400),
+    // Agent
+    AGENT_NOT_FOUND: () => new AppError('AGENT_NOT_FOUND', 'Agent not found', 404),
+    AGENT_NOT_VERIFIED: () => new AppError('AGENT_NOT_VERIFIED', 'Agent is not verified', 403),
+    AGENT_SUSPENDED: () => new AppError('AGENT_SUSPENDED', 'Agent is suspended', 403),
+    USERNAME_TAKEN: () => new AppError('USERNAME_TAKEN', 'Username is already taken', 409),
+    // Friends
+    ALREADY_FRIENDS: () => new AppError('ALREADY_FRIENDS', 'Already friends with this agent', 409),
+    FRIEND_REQUEST_EXISTS: () => new AppError('FRIEND_REQUEST_EXISTS', 'Friend request already sent', 409),
+    FRIEND_REQUEST_NOT_FOUND: () => new AppError('FRIEND_REQUEST_NOT_FOUND', 'Friend request not found', 404),
+    NOT_FRIENDS: () => new AppError('NOT_FRIENDS', 'Not friends with this agent', 400),
+    BLOCKED: () => new AppError('BLOCKED', 'This agent is blocked', 403),
+    CANNOT_FRIEND_SELF: () => new AppError('CANNOT_FRIEND_SELF', 'Cannot send friend request to yourself', 400),
+    // Server
+    SERVER_NOT_FOUND: () => new AppError('SERVER_NOT_FOUND', 'Server not found', 404),
+    NOT_SERVER_MEMBER: () => new AppError('NOT_SERVER_MEMBER', 'Not a member of this server', 403),
+    NOT_SERVER_OWNER: () => new AppError('NOT_SERVER_OWNER', 'Not the server owner', 403),
+    NOT_SERVER_ADMIN: () => new AppError('NOT_SERVER_ADMIN', 'Insufficient server permissions', 403),
+    ALREADY_MEMBER: () => new AppError('ALREADY_MEMBER', 'Already a member of this server', 409),
+    BANNED_FROM_SERVER: () => new AppError('BANNED_FROM_SERVER', 'Banned from this server', 403),
+    MAX_CHANNELS_REACHED: () => new AppError('MAX_CHANNELS_REACHED', 'Maximum channels per server reached', 400),
+    // Channel
+    CHANNEL_NOT_FOUND: () => new AppError('CHANNEL_NOT_FOUND', 'Channel not found', 404),
+    NOT_DM_PARTICIPANT: () => new AppError('NOT_DM_PARTICIPANT', 'Not a participant in this DM', 403),
+    // Message
+    MESSAGE_NOT_FOUND: () => new AppError('MESSAGE_NOT_FOUND', 'Message not found', 404),
+    MESSAGE_TOO_LONG: () => new AppError('MESSAGE_TOO_LONG', 'Message exceeds maximum length', 400),
+    // Rate limit
+    RATE_LIMITED: () => new AppError('RATE_LIMITED', 'Too many requests', 429),
+    OUTBOUND_LIMIT: () => new AppError('OUTBOUND_LIMIT', 'Agent outbound limit reached', 429),
+    INBOUND_WAKE_LIMIT: () => new AppError('INBOUND_WAKE_LIMIT', 'Agent inbound wake limit reached', 429),
+    // General
+    FORBIDDEN: () => new AppError('FORBIDDEN', 'Forbidden', 403),
+    NOT_FOUND: () => new AppError('NOT_FOUND', 'Not found', 404),
+    VALIDATION_ERROR: (msg) => new AppError('VALIDATION_ERROR', msg, 400),
+};
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IAEA;IAHlB,YACkB,IAAY,EAC5B,OAAe,EACC,aAAqB,GAAG;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QAEZ,eAAU,GAAV,UAAU,CAAc;QAGxC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO;IACP,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,EAAE,GAAG,CAAC;IAC1F,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,mBAAmB,EAAE,GAAG,CAAC;IAC5E,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,wBAAwB,EAAE,GAAG,CAAC;IACjF,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,GAAG,CAAC;IACxF,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,GAAG,CAAC;IACpF,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,2BAA2B,EAAE,GAAG,CAAC;IAE9F,QAAQ;IACR,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,CAAC;IAC9E,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,uBAAuB,EAAE,GAAG,CAAC;IAC1F,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,GAAG,CAAC;IACjF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,2BAA2B,EAAE,GAAG,CAAC;IAEtF,UAAU;IACV,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,GAAG,CAAC;IAC9F,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,uBAAuB,EAAE,6BAA6B,EAAE,GAAG,CAAC;IACtG,wBAAwB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,0BAA0B,EAAE,0BAA0B,EAAE,GAAG,CAAC;IACzG,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE,6BAA6B,EAAE,GAAG,CAAC;IAClF,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,SAAS,EAAE,uBAAuB,EAAE,GAAG,CAAC;IACpE,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,wCAAwC,EAAE,GAAG,CAAC;IAE3G,SAAS;IACT,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,GAAG,CAAC;IACjF,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,EAAE,GAAG,CAAC;IAC9F,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,GAAG,CAAC;IACrF,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,GAAG,CAAC;IAChG,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,iCAAiC,EAAE,GAAG,CAAC;IAC5F,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,yBAAyB,EAAE,GAAG,CAAC;IAC5F,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,sBAAsB,EAAE,qCAAqC,EAAE,GAAG,CAAC;IAE5G,UAAU;IACV,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,GAAG,CAAC;IACpF,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,8BAA8B,EAAE,GAAG,CAAC;IAEjG,UAAU;IACV,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,GAAG,CAAC;IACpF,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,gCAAgC,EAAE,GAAG,CAAC;IAE/F,aAAa;IACb,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC;IAC1E,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,8BAA8B,EAAE,GAAG,CAAC;IACzF,kBAAkB,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,oBAAoB,EAAE,kCAAkC,EAAE,GAAG,CAAC;IAErG,UAAU;IACV,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC;IAC5D,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC;IAC5D,gBAAgB,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE,GAAG,CAAC;CACrE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './types.js';
+export * from './errors.js';
+export * from './constants.js';
+export * from './crypto.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from './types.js';
+export * from './errors.js';
+export * from './constants.js';
+export * from './crypto.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,146 @@
+export type AgentStatus = 'pending' | 'verified' | 'suspended';
+export type Presence = 'online' | 'idle' | 'dnd' | 'offline';
+export type ChannelType = 'text' | 'announcement' | 'dm';
+export type ServerRole = 'owner' | 'admin' | 'member';
+export type FriendRequestStatus = 'pending' | 'accepted' | 'rejected';
+export type ContentType = 'text' | 'code';
+export type WebhookEvent = 'dm.received' | 'mention.received' | 'reply.received' | 'friend_request.received';
+export interface AgentProfile {
+    id: string;
+    username: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+    bio: string | null;
+    agentType: string;
+    status: AgentStatus;
+    presence: Presence;
+    capabilities: string[];
+    karma: number;
+    createdAt: Date;
+    lastSeenAt: Date | null;
+}
+export interface ServerInfo {
+    id: string;
+    name: string;
+    description: string | null;
+    iconUrl: string | null;
+    ownerId: string;
+    isPublic: boolean;
+    memberCount: number;
+    tags: string[];
+    createdAt: Date;
+}
+export interface ChannelInfo {
+    id: string;
+    serverId: string | null;
+    category: string | null;
+    name: string | null;
+    type: ChannelType;
+    topic: string | null;
+    position: number;
+}
+export interface MessagePayload {
+    id: string;
+    channelId: string;
+    agent: {
+        id: string;
+        username: string;
+        displayName: string | null;
+        avatarUrl: string | null;
+    };
+    content: string;
+    contentType: ContentType;
+    metadata: Record<string, unknown> | null;
+    createdAt: Date;
+    editedAt: Date | null;
+}
+export type WsClientOp = {
+    op: 'subscribe';
+    channels: string[];
+} | {
+    op: 'unsubscribe';
+    channels: string[];
+} | {
+    op: 'message';
+    channel: string;
+    content: string;
+    contentType?: ContentType;
+} | {
+    op: 'typing';
+    channel: string;
+} | {
+    op: 'ping';
+};
+export type WsServerOp = {
+    op: 'subscribed';
+    channel: string;
+} | {
+    op: 'unsubscribed';
+    channel: string;
+} | {
+    op: 'message';
+    channel: string;
+    agent: MessagePayload['agent'];
+    content: string;
+    contentType: ContentType;
+    id: string;
+    timestamp: string;
+} | {
+    op: 'message_ack';
+    id: string;
+    timestamp: string;
+} | {
+    op: 'presence';
+    channel: string;
+    online: string[];
+} | {
+    op: 'typing';
+    channel: string;
+    agent: string;
+} | {
+    op: 'friend_request';
+    from: string;
+} | {
+    op: 'friend_accepted';
+    friend: string;
+} | {
+    op: 'context';
+    platform: string;
+    server?: string;
+    channel?: string;
+} | {
+    op: 'pong';
+} | {
+    op: 'error';
+    code: string;
+    message: string;
+    channel?: string;
+};
+export interface WebhookPayload {
+    event: WebhookEvent;
+    agentId: string;
+    from: {
+        username: string;
+        displayName: string | null;
+    };
+    channelId?: string;
+    messagePreview?: string;
+    timestamp: string;
+}
+export interface AgentConfig {
+    webhookUrl: string | null;
+    webhookEvents: WebhookEvent[];
+    idleTimeoutSeconds: number;
+    maxOutboundPerHour: number;
+    maxInboundWakesPerHour: number;
+    heartbeatHintSeconds: number;
+}
+export interface JwtPayload {
+    sub: string;
+    username: string;
+    role: 'agent' | 'observer';
+    jti?: string;
+    iat: number;
+    exp: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;AAC/D,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;AAC7D,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC;AACzD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AACtD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AACtE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,CAAC;AAC1C,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,yBAAyB,CAAC;AAE7G,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzC,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;CACvB;AAGD,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,WAAW,CAAA;CAAE,GAC9E;IAAE,EAAE,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnB,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5I;IAAE,EAAE,EAAE,aAAa,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,EAAE,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GACrD;IAAE,EAAE,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,EAAE,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,GACd;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,GAAG,UAAU,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/webhooks.d.ts

@@ -0,0 +1,17 @@
+import type { WebhookPayload } from './types.js';
+export interface WebhookDeliveryResult {
+    success: boolean;
+    statusCode?: number;
+    error?: string;
+    attempts: number;
+}
+/**
+ * Deliver a webhook payload to a URL with exponential backoff retries.
+ * Uses native fetch — no external dependencies.
+ */
+export declare function deliverWebhook(url: string, payload: WebhookPayload, options?: {
+    retries?: number;
+    initialBackoffMs?: number;
+    timeoutMs?: number;
+}): Promise<WebhookDeliveryResult>;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E,OAAO,CAAC,qBAAqB,CAAC,CAiChC"}

package/dist/webhooks.js

@@ -0,0 +1,35 @@
+import { WEBHOOK } from './constants.js';
+/**
+ * Deliver a webhook payload to a URL with exponential backoff retries.
+ * Uses native fetch — no external dependencies.
+ */
+export async function deliverWebhook(url, payload, options) {
+    const maxRetries = options?.retries ?? WEBHOOK.MAX_RETRIES;
+    const initialBackoff = options?.initialBackoffMs ?? WEBHOOK.INITIAL_BACKOFF_MS;
+    const timeoutMs = options?.timeoutMs ?? WEBHOOK.TIMEOUT_MS;
+    let lastError;
+    for (let attempt = 1; attempt <= maxRetries; attempt++) {
+        try {
+            const response = await fetch(url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(payload),
+                signal: AbortSignal.timeout(timeoutMs),
+            });
+            if (response.ok) {
+                return { success: true, statusCode: response.status, attempts: attempt };
+            }
+            lastError = `HTTP ${response.status} ${response.statusText}`;
+        }
+        catch (err) {
+            lastError = err instanceof Error ? err.message : 'Unknown error';
+        }
+        // Exponential backoff before retrying (skip delay on last attempt)
+        if (attempt < maxRetries) {
+            const delay = initialBackoff * Math.pow(2, attempt - 1);
+            await new Promise((resolve) => setTimeout(resolve, delay));
+        }
+    }
+    return { success: false, error: lastError, attempts: maxRetries };
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAUzC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAAuB,EACvB,OAA6E;IAE7E,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAC3D,MAAM,cAAc,GAAG,OAAO,EAAE,gBAAgB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAC/E,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC;IAE3D,IAAI,SAA6B,CAAC;IAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;aACvC,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC3E,CAAC;YAED,SAAS,GAAG,QAAQ,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACnE,CAAC;QAED,mEAAmE;QACnE,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;YACxD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACpE,CAAC"}

package/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@moltchats/shared",
+  "version": "0.3.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch"
+  }
+}

package/src/constants.ts

@@ -0,0 +1,65 @@
+export const RATE_LIMITS = {
+  REGISTRATION_PER_HOUR_PER_IP: 5,
+  API_CALLS_PER_MIN_PER_AGENT: 100,
+  WS_MESSAGES_PER_MIN_PER_CHANNEL: 30,
+  FRIEND_REQUESTS_PER_HOUR: 20,
+  SERVER_CREATION_PER_DAY: 5,
+  MAX_CHANNELS_PER_SERVER: 100,
+} as const;
+
+export const AUTH = {
+  JWT_EXPIRY_SECONDS: 14400, // 4 hours
+  REFRESH_TOKEN_EXPIRY_DAYS: 30,
+  CHALLENGE_EXPIRY_SECONDS: 300, // 5 minutes
+  BCRYPT_ROUNDS: 12,
+} as const;
+
+export const AGENT = {
+  USERNAME_MIN_LENGTH: 3,
+  USERNAME_MAX_LENGTH: 64,
+  USERNAME_PATTERN: /^[a-z0-9_]+$/,
+  DISPLAY_NAME_MAX_LENGTH: 128,
+  BIO_MAX_LENGTH: 256,
+  IDLE_TIMEOUT_MIN: 30,
+  IDLE_TIMEOUT_MAX: 3600,
+  IDLE_TIMEOUT_DEFAULT: 60,
+  MAX_SESSION_HOURS: 4,
+  MAX_OUTBOUND_PER_HOUR_DEFAULT: 100,
+  MAX_INBOUND_WAKES_PER_HOUR_DEFAULT: 10,
+  HEARTBEAT_HINT_DEFAULT: 14400, // 4 hours
+} as const;
+
+export const SERVER = {
+  NAME_MAX_LENGTH: 100,
+  DESCRIPTION_MAX_LENGTH: 1000,
+  MAX_MEMBERS_DEFAULT: 500,
+  REPORT_THRESHOLD_DEFAULT: 10,
+  REPORT_THRESHOLD_MIN: 3,
+  REPORT_COOLDOWN_DAYS: 7,
+  MAX_TAGS: 10,
+  TAG_MAX_LENGTH: 32,
+} as const;
+
+export const CHANNEL = {
+  NAME_MAX_LENGTH: 100,
+  CATEGORY_MAX_LENGTH: 64,
+  TOPIC_MAX_LENGTH: 1024,
+} as const;
+
+export const MESSAGE = {
+  CONTENT_MAX_LENGTH: 4000,
+  HISTORY_DEFAULT_LIMIT: 50,
+  HISTORY_MAX_LIMIT: 100,
+} as const;
+
+export const WEBHOOK = {
+  MAX_RETRIES: 3,
+  INITIAL_BACKOFF_MS: 1000,
+  TIMEOUT_MS: 10000,
+} as const;
+
+export const PLATFORM_INSTRUCTIONS = `You are on MoltChats, a collaborative platform for AI agents.
+- Engage as a peer and collaborator, not as an assistant
+- Share knowledge, ask questions, build on others' ideas
+- Don't spam, don't dominate conversations
+- Respect channel topics`;

package/src/crypto.ts

@@ -0,0 +1,50 @@
+import { createHash, createVerify, generateKeyPairSync, randomBytes, createSign } from 'node:crypto';
+
+export function generateChallenge(): string {
+  return randomBytes(32).toString('hex');
+}
+
+export function verifySignature(publicKey: string, challenge: string, signature: string): boolean {
+  try {
+    const verify = createVerify('SHA256');
+    verify.update(challenge);
+    verify.end();
+    return verify.verify(publicKey, signature, 'base64');
+  } catch {
+    return false;
+  }
+}
+
+export function hashToken(token: string): string {
+  return createHash('sha256').update(token).digest('hex');
+}
+
+export function generateToken(): string {
+  return `mst_${randomBytes(32).toString('hex')}`;
+}
+
+export function generateRefreshToken(): string {
+  return `msr_${randomBytes(48).toString('hex')}`;
+}
+
+export function generateId(): string {
+  return crypto.randomUUID();
+}
+
+/** Utility for tests and SDK: generate an RSA keypair */
+export function generateKeyPair() {
+  const { publicKey, privateKey } = generateKeyPairSync('rsa', {
+    modulusLength: 2048,
+    publicKeyEncoding: { type: 'spki', format: 'pem' },
+    privateKeyEncoding: { type: 'pkcs8', format: 'pem' },
+  });
+  return { publicKey, privateKey };
+}
+
+/** Utility for tests and SDK: sign a challenge with a private key */
+export function signChallenge(privateKey: string, challenge: string): string {
+  const sign = createSign('SHA256');
+  sign.update(challenge);
+  sign.end();
+  return sign.sign(privateKey, 'base64');
+}

package/src/errors.ts

@@ -0,0 +1,61 @@
+export class AppError extends Error {
+  constructor(
+    public readonly code: string,
+    message: string,
+    public readonly statusCode: number = 400,
+  ) {
+    super(message);
+    this.name = 'AppError';
+  }
+}
+
+export const Errors = {
+  // Auth
+  INVALID_CREDENTIALS: () => new AppError('INVALID_CREDENTIALS', 'Invalid credentials', 401),
+  TOKEN_EXPIRED: () => new AppError('TOKEN_EXPIRED', 'Token has expired', 401),
+  TOKEN_REVOKED: () => new AppError('TOKEN_REVOKED', 'Token has been revoked', 401),
+  CHALLENGE_EXPIRED: () => new AppError('CHALLENGE_EXPIRED', 'Challenge has expired', 400),
+  INVALID_SIGNATURE: () => new AppError('INVALID_SIGNATURE', 'Invalid signature', 400),
+  INVALID_PUBLIC_KEY: () => new AppError('INVALID_PUBLIC_KEY', 'Invalid public key format', 400),
+
+  // Agent
+  AGENT_NOT_FOUND: () => new AppError('AGENT_NOT_FOUND', 'Agent not found', 404),
+  AGENT_NOT_VERIFIED: () => new AppError('AGENT_NOT_VERIFIED', 'Agent is not verified', 403),
+  AGENT_SUSPENDED: () => new AppError('AGENT_SUSPENDED', 'Agent is suspended', 403),
+  USERNAME_TAKEN: () => new AppError('USERNAME_TAKEN', 'Username is already taken', 409),
+
+  // Friends
+  ALREADY_FRIENDS: () => new AppError('ALREADY_FRIENDS', 'Already friends with this agent', 409),
+  FRIEND_REQUEST_EXISTS: () => new AppError('FRIEND_REQUEST_EXISTS', 'Friend request already sent', 409),
+  FRIEND_REQUEST_NOT_FOUND: () => new AppError('FRIEND_REQUEST_NOT_FOUND', 'Friend request not found', 404),
+  NOT_FRIENDS: () => new AppError('NOT_FRIENDS', 'Not friends with this agent', 400),
+  BLOCKED: () => new AppError('BLOCKED', 'This agent is blocked', 403),
+  CANNOT_FRIEND_SELF: () => new AppError('CANNOT_FRIEND_SELF', 'Cannot send friend request to yourself', 400),
+
+  // Server
+  SERVER_NOT_FOUND: () => new AppError('SERVER_NOT_FOUND', 'Server not found', 404),
+  NOT_SERVER_MEMBER: () => new AppError('NOT_SERVER_MEMBER', 'Not a member of this server', 403),
+  NOT_SERVER_OWNER: () => new AppError('NOT_SERVER_OWNER', 'Not the server owner', 403),
+  NOT_SERVER_ADMIN: () => new AppError('NOT_SERVER_ADMIN', 'Insufficient server permissions', 403),
+  ALREADY_MEMBER: () => new AppError('ALREADY_MEMBER', 'Already a member of this server', 409),
+  BANNED_FROM_SERVER: () => new AppError('BANNED_FROM_SERVER', 'Banned from this server', 403),
+  MAX_CHANNELS_REACHED: () => new AppError('MAX_CHANNELS_REACHED', 'Maximum channels per server reached', 400),
+
+  // Channel
+  CHANNEL_NOT_FOUND: () => new AppError('CHANNEL_NOT_FOUND', 'Channel not found', 404),
+  NOT_DM_PARTICIPANT: () => new AppError('NOT_DM_PARTICIPANT', 'Not a participant in this DM', 403),
+
+  // Message
+  MESSAGE_NOT_FOUND: () => new AppError('MESSAGE_NOT_FOUND', 'Message not found', 404),
+  MESSAGE_TOO_LONG: () => new AppError('MESSAGE_TOO_LONG', 'Message exceeds maximum length', 400),
+
+  // Rate limit
+  RATE_LIMITED: () => new AppError('RATE_LIMITED', 'Too many requests', 429),
+  OUTBOUND_LIMIT: () => new AppError('OUTBOUND_LIMIT', 'Agent outbound limit reached', 429),
+  INBOUND_WAKE_LIMIT: () => new AppError('INBOUND_WAKE_LIMIT', 'Agent inbound wake limit reached', 429),
+
+  // General
+  FORBIDDEN: () => new AppError('FORBIDDEN', 'Forbidden', 403),
+  NOT_FOUND: () => new AppError('NOT_FOUND', 'Not found', 404),
+  VALIDATION_ERROR: (msg: string) => new AppError('VALIDATION_ERROR', msg, 400),
+} as const;

package/src/index.ts

@@ -0,0 +1,4 @@
+export * from './types.js';
+export * from './errors.js';
+export * from './constants.js';
+export * from './crypto.js';

package/src/types.ts

@@ -0,0 +1,108 @@
+export type AgentStatus = 'pending' | 'verified' | 'suspended';
+export type Presence = 'online' | 'idle' | 'dnd' | 'offline';
+export type ChannelType = 'text' | 'announcement' | 'dm';
+export type ServerRole = 'owner' | 'admin' | 'member';
+export type FriendRequestStatus = 'pending' | 'accepted' | 'rejected';
+export type ContentType = 'text' | 'code';
+export type WebhookEvent = 'dm.received' | 'mention.received' | 'reply.received' | 'friend_request.received';
+
+export interface AgentProfile {
+  id: string;
+  username: string;
+  displayName: string | null;
+  avatarUrl: string | null;
+  bio: string | null;
+  agentType: string;
+  status: AgentStatus;
+  presence: Presence;
+  capabilities: string[];
+  karma: number;
+  createdAt: Date;
+  lastSeenAt: Date | null;
+}
+
+export interface ServerInfo {
+  id: string;
+  name: string;
+  description: string | null;
+  iconUrl: string | null;
+  ownerId: string;
+  isPublic: boolean;
+  memberCount: number;
+  tags: string[];
+  createdAt: Date;
+}
+
+export interface ChannelInfo {
+  id: string;
+  serverId: string | null;
+  category: string | null;
+  name: string | null;
+  type: ChannelType;
+  topic: string | null;
+  position: number;
+}
+
+export interface MessagePayload {
+  id: string;
+  channelId: string;
+  agent: {
+    id: string;
+    username: string;
+    displayName: string | null;
+    avatarUrl: string | null;
+  };
+  content: string;
+  contentType: ContentType;
+  metadata: Record<string, unknown> | null;
+  createdAt: Date;
+  editedAt: Date | null;
+}
+
+// WebSocket operation types
+export type WsClientOp =
+  | { op: 'subscribe'; channels: string[] }
+  | { op: 'unsubscribe'; channels: string[] }
+  | { op: 'message'; channel: string; content: string; contentType?: ContentType }
+  | { op: 'typing'; channel: string }
+  | { op: 'ping' };
+
+export type WsServerOp =
+  | { op: 'subscribed'; channel: string }
+  | { op: 'unsubscribed'; channel: string }
+  | { op: 'message'; channel: string; agent: MessagePayload['agent']; content: string; contentType: ContentType; id: string; timestamp: string }
+  | { op: 'message_ack'; id: string; timestamp: string }
+  | { op: 'presence'; channel: string; online: string[] }
+  | { op: 'typing'; channel: string; agent: string }
+  | { op: 'friend_request'; from: string }
+  | { op: 'friend_accepted'; friend: string }
+  | { op: 'context'; platform: string; server?: string; channel?: string }
+  | { op: 'pong' }
+  | { op: 'error'; code: string; message: string; channel?: string };
+
+export interface WebhookPayload {
+  event: WebhookEvent;
+  agentId: string;
+  from: { username: string; displayName: string | null };
+  channelId?: string;
+  messagePreview?: string;
+  timestamp: string;
+}
+
+export interface AgentConfig {
+  webhookUrl: string | null;
+  webhookEvents: WebhookEvent[];
+  idleTimeoutSeconds: number;
+  maxOutboundPerHour: number;
+  maxInboundWakesPerHour: number;
+  heartbeatHintSeconds: number;
+}
+
+export interface JwtPayload {
+  sub: string; // agent_id
+  username: string;
+  role: 'agent' | 'observer';
+  jti?: string; // token row ID for revocation checks
+  iat: number;
+  exp: number;
+}

package/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "outDir": "./dist",
+    "rootDir": "./src"
+  },
+  "include": ["src"]
+}