@mondaydotcomorg/atp-server 0.17.14

package/dist/controllers/execute.controller.js

@@ -0,0 +1,122 @@
+import { ExecutionErrorCode, sanitizeInput, MAX_CODE_SIZE } from '@mondaydotcomorg/atp-protocol';
+import { auditExecution } from '../middleware/audit.js';
+import { clientCallbackManager } from '../callback/index.js';
+import { nanoid } from 'nanoid';
+export async function handleExecute(req, res, context, body, clientId, logger) {
+    let request;
+    try {
+        request = JSON.parse(body);
+    }
+    catch (error) {
+        logger.warn('Invalid request body', { error });
+        res.writeHead(400, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({
+            error: 'Invalid request body',
+            message: error instanceof Error ? error.message : 'Failed to parse request',
+        }));
+        return;
+    }
+    request.code = sanitizeInput(request.code, MAX_CODE_SIZE);
+    if (clientId && request.config?.clientServices) {
+        clientCallbackManager.registerClient(clientId, request.config.clientServices);
+        logger.info('Client services registered', {
+            clientId,
+            services: request.config.clientServices,
+        });
+    }
+    if (clientId) {
+        clientCallbackManager.updateClientActivity(clientId);
+    }
+    const executionConfig = {
+        timeout: request.config?.timeout ?? context.defaultTimeout,
+        maxMemory: request.config?.maxMemory ?? context.defaultMemoryLimit,
+        maxLLMCalls: request.config?.maxLLMCalls ?? context.defaultLLMCallLimit,
+        allowedAPIs: request.config?.allowedAPIs ?? [],
+        allowLLMCalls: request.config?.allowLLMCalls ?? true,
+        clientServices: request.config?.clientServices,
+        provenanceMode: request.config?.provenanceMode,
+        securityPolicies: request.config?.securityPolicies,
+        provenanceHints: request.config?.provenanceHints,
+    };
+    logger.info('Validating code for execution', {
+        codeLength: request.code.length,
+        timeout: executionConfig.timeout,
+        clientServices: executionConfig.clientServices,
+    });
+    const validationResult = await context.validator.validate(request.code, executionConfig);
+    if (!validationResult.valid) {
+        logger.warn('Code validation failed', {
+            errors: validationResult.errors?.length,
+            securityIssues: validationResult.securityIssues?.length,
+        });
+        const hasSecurityIssues = validationResult.securityIssues && validationResult.securityIssues.length > 0;
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({
+            executionId: nanoid(),
+            status: hasSecurityIssues ? 'security_violation' : 'validation_failed',
+            error: {
+                message: 'Code validation failed',
+                code: hasSecurityIssues
+                    ? ExecutionErrorCode.SECURITY_VIOLATION
+                    : ExecutionErrorCode.VALIDATION_FAILED,
+                context: {
+                    errors: validationResult.errors,
+                    securityIssues: validationResult.securityIssues,
+                },
+                retryable: false,
+                suggestion: hasSecurityIssues
+                    ? 'Remove forbidden operations and use only allowed APIs'
+                    : 'Fix syntax errors and validation issues in your code',
+            },
+            stats: {
+                duration: 0,
+                memoryUsed: 0,
+                llmCallsCount: 0,
+                approvalCallsCount: 0,
+                httpCallsCount: 0,
+            },
+        }));
+        return;
+    }
+    logger.info('Executing code in sandbox');
+    const result = await context.executor.execute(request.code, executionConfig, clientId);
+    logger.info('Code execution completed', {
+        executionId: result.executionId,
+        status: result.status,
+        duration: result.stats.duration,
+        memoryUsed: result.stats.memoryUsed,
+        llmCalls: result.stats.llmCallsCount,
+        approvalCalls: result.stats.approvalCallsCount,
+    });
+    if (result.status === 'paused' && result.needsCallback && clientId && result.callbackHistory) {
+        await context.stateManager.pause({
+            executionId: result.executionId,
+            code: request.code,
+            config: executionConfig,
+            clientId,
+            callbackRequest: result.needsCallback,
+            pausedAt: Date.now(),
+            callbackHistory: result.callbackHistory,
+            currentCallbackIndex: result.callbackHistory.length - 1,
+            context: {},
+        });
+        logger.info('Execution state saved', {
+            executionId: result.executionId,
+            callbackType: result.needsCallback.type,
+            storage: context.stateManager.getStorageType(),
+            historyLength: result.callbackHistory.length,
+        });
+    }
+    if (context.auditConfig?.enabled) {
+        await auditExecution({
+            executionId: result.executionId,
+            apiKey: req.apiKey,
+            ip: req.socket.remoteAddress,
+            code: request.code,
+            result,
+        });
+    }
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(result));
+}
+//# sourceMappingURL=execute.controller.js.map

package/dist/controllers/execute.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.controller.js","sourceRoot":"","sources":["../../src/controllers/execute.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAKjG,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAahC,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,GAAoB,EACpB,GAAmB,EACnB,OAAuB,EACvB,IAAY,EACZ,QAA4B,EAC5B,MAAoC;IAEpC,IAAI,OAA4D,CAAC;IAEjE,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC;YACd,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SAC3E,CAAC,CACF,CAAC;QACF,OAAO;IACR,CAAC;IAED,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAE1D,IAAI,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAChD,qBAAqB,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACzC,QAAQ;YACR,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc;SACvC,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACd,qBAAqB,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,eAAe,GAAoB;QACxC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,cAAc;QAC1D,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,kBAAkB;QAClE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,mBAAmB;QACvE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE;QAC9C,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,IAAI,IAAI;QACpD,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc;QAC9C,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc;QAC9C,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB;QAClD,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe;KAChD,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;QAC5C,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;QAC/B,OAAO,EAAE,eAAe,CAAC,OAAO;QAChC,cAAc,EAAE,eAAe,CAAC,cAAc;KAC9C,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAEzF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACrC,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM;YACvC,cAAc,EAAE,gBAAgB,CAAC,cAAc,EAAE,MAAM;SACvD,CAAC,CAAC;QAEH,MAAM,iBAAiB,GACtB,gBAAgB,CAAC,cAAc,IAAI,gBAAgB,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAE/E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC;YACd,WAAW,EAAE,MAAM,EAAE;YACrB,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB;YACtE,KAAK,EAAE;gBACN,OAAO,EAAE,wBAAwB;gBACjC,IAAI,EAAE,iBAAiB;oBACtB,CAAC,CAAC,kBAAkB,CAAC,kBAAkB;oBACvC,CAAC,CAAC,kBAAkB,CAAC,iBAAiB;gBACvC,OAAO,EAAE;oBACR,MAAM,EAAE,gBAAgB,CAAC,MAAM;oBAC/B,cAAc,EAAE,gBAAgB,CAAC,cAAc;iBAC/C;gBACD,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,iBAAiB;oBAC5B,CAAC,CAAC,uDAAuD;oBACzD,CAAC,CAAC,sDAAsD;aACzD;YACD,KAAK,EAAE;gBACN,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,CAAC;gBACb,aAAa,EAAE,CAAC;gBAChB,kBAAkB,EAAE,CAAC;gBACrB,cAAc,EAAE,CAAC;aACjB;SACD,CAAC,CACF,CAAC;QACF,OAAO;IACR,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IAEvF,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACvC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;QAC/B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;QACnC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;QACpC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB;KAC9C,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,QAAQ,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC9F,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,eAAe;YACvB,QAAQ;YACR,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACvD,OAAO,EAAE,EAAE;SACX,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACpC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI;YACvC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,cAAc,EAAE;YAC9C,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;SAC5C,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAClC,MAAM,cAAc,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAG,GAAW,CAAC,MAAM;YAC3B,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa;YAC5B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM;SACN,CAAC,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/controllers/info.controller.d.ts

@@ -0,0 +1,3 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export declare function handleInfo(req: IncomingMessage, res: ServerResponse): Promise<void>;
+//# sourceMappingURL=info.controller.d.ts.map

package/dist/controllers/info.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/info.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,wBAAsB,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAUzF"}

package/dist/controllers/info.controller.js

@@ -0,0 +1,13 @@
+import { sendJson } from '../utils/response.js';
+export async function handleInfo(req, res) {
+    sendJson(res, {
+        version: '1.0.0',
+        capabilities: {
+            execution: true,
+            search: true,
+            streaming: true,
+            llmCalls: true,
+        },
+    });
+}
+//# sourceMappingURL=info.controller.js.map

package/dist/controllers/info.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"info.controller.js","sourceRoot":"","sources":["../../src/controllers/info.controller.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAoB,EAAE,GAAmB;IACzE,QAAQ,CAAC,GAAG,EAAE;QACb,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE;YACb,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI;SACd;KACD,CAAC,CAAC;AACJ,CAAC"}

package/dist/controllers/resume.controller.d.ts

@@ -0,0 +1,11 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { SandboxExecutor } from '../executor/index.js';
+import type { ExecutionStateManager } from '../execution-state/index.js';
+import type { log } from '@mondaydotcomorg/atp-runtime';
+interface ResumeContext {
+    executor: SandboxExecutor;
+    stateManager: ExecutionStateManager;
+}
+export declare function handleResume(req: IncomingMessage, res: ServerResponse, context: ResumeContext, executionId: string, body: string, logger: ReturnType<typeof log.child>): Promise<void>;
+export {};
+//# sourceMappingURL=resume.controller.d.ts.map

package/dist/controllers/resume.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/resume.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAExD,UAAU,aAAa;IACtB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,EAAE,qBAAqB,CAAC;CACpC;AAED,wBAAsB,YAAY,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CA0Ef"}

package/dist/controllers/resume.controller.js

@@ -0,0 +1,61 @@
+export async function handleResume(req, res, context, executionId, body, logger) {
+    logger.info('Resuming paused execution', { executionId });
+    const pausedState = await context.stateManager.get(executionId);
+    if (!pausedState) {
+        logger.warn('Execution not found or expired', { executionId });
+        res.writeHead(404, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: 'Execution not found or expired' }));
+        return;
+    }
+    const { result: callbackResult } = JSON.parse(body);
+    logger.info('Client callback result received', {
+        executionId,
+        callbackType: pausedState.callbackRequest.type,
+        operation: pausedState.callbackRequest.operation,
+    });
+    const updatedHistory = pausedState.callbackHistory.map((record, index) => {
+        if (index === pausedState.currentCallbackIndex) {
+            return { ...record, result: callbackResult };
+        }
+        return record;
+    });
+    logger.info('Re-executing with replay', {
+        executionId,
+        historyLength: updatedHistory.length,
+    });
+    const result = await context.executor.execute(pausedState.code, pausedState.config, pausedState.clientId, {
+        callbackHistory: updatedHistory,
+        newCallbackResult: callbackResult,
+        executionId,
+    });
+    logger.info('Resumed execution completed', {
+        executionId: result.executionId,
+        status: result.status,
+        duration: result.stats.duration,
+    });
+    if (result.status === 'paused' && result.needsCallback && result.callbackHistory) {
+        await context.stateManager.pause({
+            executionId: result.executionId,
+            code: pausedState.code,
+            config: pausedState.config,
+            clientId: pausedState.clientId,
+            callbackRequest: result.needsCallback,
+            pausedAt: Date.now(),
+            callbackHistory: result.callbackHistory,
+            currentCallbackIndex: result.callbackHistory.length - 1,
+            context: {},
+        });
+        logger.info('Execution paused again (multi-callback)', {
+            executionId: result.executionId,
+            callbackType: result.needsCallback.type,
+            totalCallbacks: result.callbackHistory.length,
+        });
+    }
+    else {
+        await context.stateManager.delete(executionId);
+        logger.debug('Execution state cleaned up', { executionId });
+    }
+    res.writeHead(200, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify(result));
+}
+//# sourceMappingURL=resume.controller.js.map

package/dist/controllers/resume.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.controller.js","sourceRoot":"","sources":["../../src/controllers/resume.controller.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAoB,EACpB,GAAmB,EACnB,OAAsB,EACtB,WAAmB,EACnB,IAAY,EACZ,MAAoC;IAEpC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAE1D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAEhE,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC;QACrE,OAAO;IACR,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;IAE3E,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;QAC9C,WAAW;QACX,YAAY,EAAE,WAAW,CAAC,eAAe,CAAC,IAAI;QAC9C,SAAS,EAAE,WAAW,CAAC,eAAe,CAAC,SAAS;KAChD,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACxE,IAAI,KAAK,KAAK,WAAW,CAAC,oBAAoB,EAAE,CAAC;YAChD,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;QACvC,WAAW;QACX,aAAa,EAAE,cAAc,CAAC,MAAM;KACpC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAC5C,WAAW,CAAC,IAAI,EAChB,WAAW,CAAC,MAAM,EAClB,WAAW,CAAC,QAAQ,EACpB;QACC,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,cAAc;QACjC,WAAW;KACX,CACD,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;QAC1C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;KAC/B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAClF,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,QAAQ,EAAE,WAAW,CAAC,QAAQ;YAC9B,eAAe,EAAE,MAAM,CAAC,aAAa;YACrC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;YACvD,OAAO,EAAE,EAAE;SACX,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;YACtD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI;YACvC,cAAc,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;SAC7C,CAAC,CAAC;IACJ,CAAC;SAAM,CAAC;QACP,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACjC,CAAC"}

package/dist/controllers/search.controller.d.ts

@@ -0,0 +1,4 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { SearchEngine } from '../search/index.js';
+export declare function handleSearch(req: IncomingMessage, res: ServerResponse, searchEngine: SearchEngine, body: string): Promise<void>;
+//# sourceMappingURL=search.controller.d.ts.map

package/dist/controllers/search.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/search.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,wBAAsB,YAAY,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,MAAM,GACV,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/controllers/search.controller.js

@@ -0,0 +1,7 @@
+import { sendJson } from '../utils/response.js';
+export async function handleSearch(req, res, searchEngine, body) {
+    const searchOptions = JSON.parse(body);
+    const results = await searchEngine.search(searchOptions);
+    sendJson(res, { results });
+}
+//# sourceMappingURL=search.controller.js.map

package/dist/controllers/search.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.controller.js","sourceRoot":"","sources":["../../src/controllers/search.controller.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,GAAoB,EACpB,GAAmB,EACnB,YAA0B,EAC1B,IAAY;IAEZ,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzD,QAAQ,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/controllers/stream.controller.d.ts

@@ -0,0 +1,19 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { CodeValidator } from '../validator/index.js';
+import type { SandboxExecutor } from '../executor/index.js';
+import type { ExecutionStateManager } from '../execution-state/index.js';
+import type { log } from '@mondaydotcomorg/atp-runtime';
+interface StreamContext {
+    validator: CodeValidator;
+    executor: SandboxExecutor;
+    stateManager?: ExecutionStateManager;
+    auditConfig?: {
+        enabled: boolean;
+    };
+    defaultTimeout: number;
+    defaultMemoryLimit: number;
+    defaultLLMCallLimit: number;
+}
+export declare function handleExecuteStream(req: IncomingMessage, res: ServerResponse, context: StreamContext, body: string, clientId: string | undefined, logger: ReturnType<typeof log.child>): Promise<void>;
+export {};
+//# sourceMappingURL=stream.controller.d.ts.map

package/dist/controllers/stream.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/stream.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAQjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEzE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,8BAA8B,CAAC;AAExD,UAAU,aAAa;IACtB,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,eAAe,CAAC;IAC1B,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAsB,mBAAmB,CACxC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,aAAa,EACtB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC,CA8Jf"}

package/dist/controllers/stream.controller.js

@@ -0,0 +1,141 @@
+import { ExecutionErrorCode, validateExecutionConfig, sanitizeInput, MAX_CODE_SIZE, } from '@mondaydotcomorg/atp-protocol';
+import { nanoid } from 'nanoid';
+export async function handleExecuteStream(req, res, context, body, clientId, logger) {
+    let request;
+    try {
+        request = JSON.parse(body);
+    }
+    catch (error) {
+        logger.warn('Invalid request body', { error });
+        res.writeHead(400, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({
+            error: 'Invalid request body',
+            message: error instanceof Error ? error.message : 'Failed to parse request',
+        }));
+        return;
+    }
+    request.code = sanitizeInput(request.code, MAX_CODE_SIZE);
+    logger.info('Streaming code execution request', {
+        codeLength: request.code.length,
+    });
+    res.writeHead(200, {
+        'Content-Type': 'text/event-stream',
+        'Cache-Control': 'no-cache',
+        Connection: 'keep-alive',
+    });
+    const sendEvent = (event, data) => {
+        res.write(`event: ${event}\n`);
+        res.write(`data: ${JSON.stringify(data)}\n\n`);
+    };
+    try {
+        if (request.config) {
+            try {
+                validateExecutionConfig(request.config);
+            }
+            catch (error) {
+                logger.warn('Invalid execution config', { error });
+                sendEvent('error', {
+                    message: error instanceof Error ? error.message : 'Invalid configuration',
+                });
+                res.end();
+                return;
+            }
+        }
+        const executionConfig = {
+            timeout: request.config?.timeout ?? context.defaultTimeout,
+            maxMemory: request.config?.maxMemory ?? context.defaultMemoryLimit,
+            maxLLMCalls: request.config?.maxLLMCalls ?? context.defaultLLMCallLimit,
+            allowedAPIs: request.config?.allowedAPIs ?? [],
+            allowLLMCalls: request.config?.allowLLMCalls ?? true,
+            progressCallback: (message, fraction) => {
+                sendEvent('progress', { message, fraction });
+            },
+            clientServices: request.config?.clientServices,
+            provenanceMode: request.config?.provenanceMode,
+            securityPolicies: request.config?.securityPolicies,
+            provenanceHints: request.config?.provenanceHints,
+        };
+        logger.info('Validating code for streaming execution', {
+            codeLength: request.code.length,
+            timeout: executionConfig.timeout,
+            clientServices: executionConfig.clientServices,
+        });
+        const validationResult = await context.validator.validate(request.code, executionConfig);
+        if (!validationResult.valid) {
+            logger.warn('Code validation failed', {
+                errors: validationResult.errors?.length,
+                securityIssues: validationResult.securityIssues?.length,
+            });
+            const hasSecurityIssues = validationResult.securityIssues && validationResult.securityIssues.length > 0;
+            sendEvent('result', {
+                executionId: nanoid(),
+                status: hasSecurityIssues ? 'security_violation' : 'validation_failed',
+                error: {
+                    message: 'Code validation failed',
+                    code: hasSecurityIssues
+                        ? ExecutionErrorCode.SECURITY_VIOLATION
+                        : ExecutionErrorCode.VALIDATION_FAILED,
+                    context: {
+                        errors: validationResult.errors,
+                        securityIssues: validationResult.securityIssues,
+                    },
+                    retryable: false,
+                    suggestion: hasSecurityIssues
+                        ? 'Remove forbidden operations and use only allowed APIs'
+                        : 'Fix syntax errors and validation issues in your code',
+                },
+                stats: {
+                    duration: 0,
+                    memoryUsed: 0,
+                    llmCallsCount: 0,
+                    approvalCallsCount: 0,
+                },
+            });
+            res.end();
+            return;
+        }
+        sendEvent('start', { message: 'Execution started' });
+        logger.info('Executing code in sandbox (streaming)');
+        const result = await context.executor.execute(request.code, executionConfig, clientId);
+        logger.info('Code execution completed (streaming)', {
+            executionId: result.executionId,
+            status: result.status,
+            duration: result.stats.duration,
+        });
+        if (result.status === 'paused' &&
+            result.needsCallback &&
+            result.callbackHistory &&
+            context.stateManager) {
+            if (!clientId) {
+                sendEvent('error', { message: 'Client ID required for paused executions' });
+                res.end();
+                return;
+            }
+            await context.stateManager.pause({
+                executionId: result.executionId,
+                code: request.code,
+                config: executionConfig,
+                clientId,
+                callbackRequest: result.needsCallback,
+                pausedAt: Date.now(),
+                callbackHistory: result.callbackHistory,
+                currentCallbackIndex: result.callbackHistory.length - 1,
+                context: {},
+            });
+            logger.info('Execution state saved (streaming)', {
+                executionId: result.executionId,
+                callbackType: result.needsCallback.type,
+                historyLength: result.callbackHistory.length,
+            });
+        }
+        sendEvent('result', result);
+        res.end();
+    }
+    catch (error) {
+        const err = error;
+        logger.error('Streaming execution error', { error: err.message });
+        sendEvent('error', { message: err.message, stack: err.stack });
+        res.end();
+    }
+}
+//# sourceMappingURL=stream.controller.js.map

package/dist/controllers/stream.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream.controller.js","sourceRoot":"","sources":["../../src/controllers/stream.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EACN,kBAAkB,EAClB,uBAAuB,EACvB,aAAa,EACb,aAAa,GACb,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAahC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,GAAoB,EACpB,GAAmB,EACnB,OAAsB,EACtB,IAAY,EACZ,QAA4B,EAC5B,MAAoC;IAEpC,IAAI,OAA4D,CAAC;IAEjE,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACN,IAAI,CAAC,SAAS,CAAC;YACd,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;SAC3E,CAAC,CACF,CAAC;QACF,OAAO;IACR,CAAC;IAED,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAE1D,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;QAC/C,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;KAC/B,CAAC,CAAC;IAEH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QAClB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;KACxB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,IAAa,EAAE,EAAE;QAClD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC/B,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,IAAI,CAAC;QACJ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,IAAI,CAAC;gBACJ,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnD,SAAS,CAAC,OAAO,EAAE;oBAClB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;iBACzE,CAAC,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;QACF,CAAC;QAED,MAAM,eAAe,GAAoB;YACxC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,cAAc;YAC1D,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC,kBAAkB;YAClE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,mBAAmB;YACvE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,EAAE;YAC9C,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,IAAI,IAAI;YACpD,gBAAgB,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE;gBACvD,SAAS,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,CAAC;YACD,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc;YAC9C,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc;YAC9C,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB;YAClD,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe;SAChD,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,yCAAyC,EAAE;YACtD,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC/B,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,cAAc,EAAE,eAAe,CAAC,cAAc;SAC9C,CAAC,CAAC;QAEH,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAEzF,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACrC,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,MAAM;gBACvC,cAAc,EAAE,gBAAgB,CAAC,cAAc,EAAE,MAAM;aACvD,CAAC,CAAC;YAEH,MAAM,iBAAiB,GACtB,gBAAgB,CAAC,cAAc,IAAI,gBAAgB,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;YAE/E,SAAS,CAAC,QAAQ,EAAE;gBACnB,WAAW,EAAE,MAAM,EAAE;gBACrB,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB;gBACtE,KAAK,EAAE;oBACN,OAAO,EAAE,wBAAwB;oBACjC,IAAI,EAAE,iBAAiB;wBACtB,CAAC,CAAC,kBAAkB,CAAC,kBAAkB;wBACvC,CAAC,CAAC,kBAAkB,CAAC,iBAAiB;oBACvC,OAAO,EAAE;wBACR,MAAM,EAAE,gBAAgB,CAAC,MAAM;wBAC/B,cAAc,EAAE,gBAAgB,CAAC,cAAc;qBAC/C;oBACD,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,iBAAiB;wBAC5B,CAAC,CAAC,uDAAuD;wBACzD,CAAC,CAAC,sDAAsD;iBACzD;gBACD,KAAK,EAAE;oBACN,QAAQ,EAAE,CAAC;oBACX,UAAU,EAAE,CAAC;oBACb,aAAa,EAAE,CAAC;oBAChB,kBAAkB,EAAE,CAAC;iBACrB;aACD,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACR,CAAC;QAED,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;QAEvF,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;YACnD,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ;SAC/B,CAAC,CAAC;QAEH,IACC,MAAM,CAAC,MAAM,KAAK,QAAQ;YAC1B,MAAM,CAAC,aAAa;YACpB,MAAM,CAAC,eAAe;YACtB,OAAO,CAAC,YAAY,EACnB,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;gBAC5E,GAAG,CAAC,GAAG,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;YAED,MAAM,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC;gBAChC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,MAAM,EAAE,eAAe;gBACvB,QAAQ;gBACR,eAAe,EAAE,MAAM,CAAC,aAAa;gBACrC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;gBACpB,eAAe,EAAE,MAAM,CAAC,eAAe;gBACvC,oBAAoB,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC;gBACvD,OAAO,EAAE,EAAE;aACX,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE;gBAChD,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI;gBACvC,aAAa,EAAE,MAAM,CAAC,eAAe,CAAC,MAAM;aAC5C,CAAC,CAAC;QACJ,CAAC;QAED,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5B,GAAG,CAAC,GAAG,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/D,GAAG,CAAC,GAAG,EAAE,CAAC;IACX,CAAC;AACF,CAAC"}

package/dist/core/config.d.ts

@@ -0,0 +1,161 @@
+import type { CacheProvider, AuthProvider, AuditSink, ProvenanceMode, SecurityPolicy, ScopeFilteringConfig } from '@mondaydotcomorg/atp-protocol';
+export declare const MB: number;
+export declare const GB: number;
+export declare const SECOND = 1000;
+export declare const MINUTE: number;
+export declare const HOUR: number;
+export declare const DAY: number;
+/**
+ * Execution configuration
+ */
+export interface ExecutionConfig {
+    /** Timeout in milliseconds */
+    timeout: number;
+    /** Memory limit in bytes */
+    memory: number;
+    /** Maximum LLM calls allowed */
+    llmCalls: number;
+    /** Provenance tracking mode (none|proxy|ast) */
+    provenanceMode?: ProvenanceMode;
+    /** Security policies for provenance-based protection */
+    securityPolicies?: SecurityPolicy[];
+}
+/**
+ * Client initialization configuration
+ */
+export interface ClientInitConfig {
+    /** Token time-to-live in milliseconds */
+    tokenTTL: number;
+    /** Token rotation interval in milliseconds */
+    tokenRotation: number;
+}
+/**
+ * Execution state configuration
+ */
+export interface ExecutionStateConfig {
+    /** TTL for paused execution state in seconds */
+    ttl: number;
+    /** Maximum allowed pause duration in seconds (default: 1 hour) */
+    maxPauseDuration: number;
+    /** Key prefix for execution state (defaults to 'atp:execution:') */
+    keyPrefix?: string;
+}
+/**
+ * Discovery configuration
+ */
+export interface DiscoveryConfig {
+    /** Enable embeddings for semantic search */
+    embeddings: boolean;
+    /** Scope filtering configuration for search results */
+    scopeFiltering?: ScopeFilteringConfig;
+}
+/**
+ * OpenTelemetry configuration
+ */
+export interface OpenTelemetryConfig {
+    /** Enable OpenTelemetry tracing and metrics */
+    enabled: boolean;
+    /** Service name for traces and metrics (defaults to 'agent-tool-protocol') */
+    serviceName?: string;
+    /** Service version for resource attributes */
+    serviceVersion?: string;
+    /** OTLP endpoint for traces (defaults to http://localhost:4318/v1/traces) */
+    traceEndpoint?: string;
+    /** OTLP endpoint for metrics (defaults to http://localhost:4318/v1/metrics) */
+    metricsEndpoint?: string;
+    /** Headers for OTLP exporter (e.g., for authentication) */
+    headers?: Record<string, string>;
+    /** Metrics export interval in milliseconds (defaults to 60000) */
+    metricsInterval?: number;
+    /** Additional resource attributes */
+    resourceAttributes?: Record<string, string>;
+}
+/**
+ * Logger interface
+ */
+export interface Logger {
+    debug(message: string, meta?: unknown): void;
+    info(message: string, meta?: unknown): void;
+    warn(message: string, meta?: unknown): void;
+    error(message: string, meta?: unknown): void;
+    child?(meta: Record<string, unknown>): Logger;
+}
+/**
+ * Audit configuration
+ */
+export interface AuditConfig {
+    /** Enable audit logging */
+    enabled: boolean;
+    /** Audit sink(s) for logging events */
+    sinks?: AuditSink | AuditSink[];
+}
+/**
+ * Provider configuration
+ */
+export interface ProvidersConfig {
+    /** Cache provider for storing execution state and data (defaults to MemoryCache) */
+    cache?: CacheProvider;
+    /** Token/credential store for managing client tokens (defaults to EnvAuthProvider) */
+    auth?: AuthProvider;
+}
+/**
+ * Server configuration (user input - all fields optional)
+ */
+export interface ServerConfig {
+    execution?: Partial<ExecutionConfig>;
+    clientInit?: Partial<ClientInitConfig>;
+    executionState?: Partial<ExecutionStateConfig>;
+    discovery?: Partial<DiscoveryConfig>;
+    /** Audit logging configuration */
+    audit?: Partial<AuditConfig>;
+    /** OpenTelemetry tracing and metrics configuration */
+    otel?: Partial<OpenTelemetryConfig>;
+    /** External providers (cache, auth) */
+    providers?: ProvidersConfig;
+    logger?: 'debug' | 'info' | 'warn' | 'error' | Logger;
+}
+/**
+ * Resolved server configuration with defaults applied
+ */
+export interface ResolvedServerConfig {
+    execution: ExecutionConfig;
+    clientInit: ClientInitConfig;
+    executionState: ExecutionStateConfig;
+    discovery: DiscoveryConfig;
+    audit: AuditConfig;
+    otel: OpenTelemetryConfig;
+    logger: 'debug' | 'info' | 'warn' | 'error' | Logger;
+}
+/**
+ * Request context passed through middleware
+ */
+export interface RequestContext {
+    method: string;
+    path: string;
+    query: Record<string, string>;
+    headers: Record<string, string>;
+    body: unknown;
+    clientId?: string;
+    clientToken?: string;
+    userId?: string;
+    user?: unknown;
+    executionId?: string;
+    code?: string;
+    validation?: unknown;
+    result?: unknown;
+    error?: Error;
+    cache?: CacheProvider;
+    auth?: AuthProvider;
+    audit?: AuditSink;
+    logger: Logger;
+    status: number;
+    responseBody: unknown;
+    throw(status: number, message: string): never;
+    assert(condition: boolean, message: string): asserts condition;
+    set(header: string, value: string): void;
+}
+/**
+ * Middleware function signature
+ */
+export type Middleware = (ctx: RequestContext, next: () => Promise<void>) => Promise<void>;
+//# sourceMappingURL=config.d.ts.map

package/dist/core/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,aAAa,EACb,YAAY,EACZ,SAAS,EACT,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,MAAM,+BAA+B,CAAC;AAEvC,eAAO,MAAM,EAAE,QAAc,CAAC;AAC9B,eAAO,MAAM,EAAE,QAAqB,CAAC;AACrC,eAAO,MAAM,MAAM,OAAO,CAAC;AAC3B,eAAO,MAAM,MAAM,QAAY,CAAC;AAChC,eAAO,MAAM,IAAI,QAAiB,CAAC;AACnC,eAAO,MAAM,GAAG,QAAsB,CAAC;AAEvC;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,aAAa,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,kEAAkE;IAClE,gBAAgB,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,4CAA4C;IAC5C,UAAU,EAAE,OAAO,CAAC;IACpB,uDAAuD;IACvD,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACtB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7C,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC3B,2BAA2B;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,uCAAuC;IACvC,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC/B,oFAAoF;IACpF,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,YAAY,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,kCAAkC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7B,sDAAsD;IACtD,IAAI,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpC,uCAAuC;IACvC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,cAAc,EAAE,oBAAoB,CAAC;IACrC,SAAS,EAAE,eAAe,CAAC;IAC3B,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;CACrD;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9C,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAC/D,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/core/config.js

@@ -0,0 +1,7 @@
+export const MB = 1024 * 1024;
+export const GB = 1024 * 1024 * 1024;
+export const SECOND = 1000;
+export const MINUTE = 60 * 1000;
+export const HOUR = 60 * 60 * 1000;
+export const DAY = 24 * 60 * 60 * 1000;
+//# sourceMappingURL=config.js.map

package/dist/core/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/core/config.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC;AAC3B,MAAM,CAAC,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC"}

package/dist/core/http.d.ts

@@ -0,0 +1,4 @@
+import { IncomingMessage } from 'node:http';
+export declare function parseBody(req: IncomingMessage): Promise<unknown>;
+export declare function parseQuery(url: string): Record<string, string>;
+//# sourceMappingURL=http.d.ts.map

package/dist/core/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/core/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,wBAAgB,SAAS,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhE;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAa9D"}