@mono-agent/web 0.12.0

package/README.md

@@ -0,0 +1,169 @@
+# @mono-agent/web
+
+The persistent browser console for mono-agent. It discovers every running local
+agent, keeps multiple independent conversations in owner-private SQLite state,
+and serves the assistant-ui PWA from one always-on process.
+
+## Category
+
+Category: `operator-surface`
+
+## Responsibility
+
+- Discover local agents through the shared trace-source registry and probe their
+  loopback operator endpoints.
+- Persist agents, threads, messages, structured reasoning/tool/telemetry parts,
+  revisions, turns, attachments, and agent pin preferences under
+  `~/.mono-agent/web`.
+- Keep an upstream turn running when a browser reloads or disconnects, and expose
+  state invalidations over SSE so any connected browser can catch up.
+- Accept browser-selected files through bounded staged uploads and forward the
+  exact transport-neutral `AgentAttachment` contract used by Telegram.
+- Serve the assistant-ui PWA and its versioned JSON/SSE API.
+
+## Install / Usage
+
+The `mono-agent web` command owns normal lifecycle management. The embeddable
+server API is also available:
+
+```ts
+import { startWebServer } from "@mono-agent/web";
+
+const server = await startWebServer(); // 0.0.0.0:5050
+console.log(server.url);
+await server.stop();
+```
+
+The interface is deliberately single-user and has no application login. Anyone
+who can reach port 5050 can inspect conversations and operate discovered agents;
+use host firewall/LAN policy and Tailscale ACLs as the access boundary. The
+server emits no CORS permission and rejects cross-origin mutations.
+
+Private IP literals, localhost, the machine hostname, and its exact `.local`
+name are accepted as browser hosts. Set `MONO_AGENT_WEB_ALLOWED_HOSTS` to a
+comma-separated list of any additional exact DNS names (for example the node's
+Tailscale DNS name); suffix wildcards are intentionally not trusted. When a
+managed agent protects its loopback operator endpoint, discovery reads only
+`MONO_AGENT_TUI_API_KEY` from that agent's attested, owner-owned dotenv file.
+
+On desktop, drag the agent rail's right edge to reveal full agent names. The
+resize separator is keyboard-operable, and its width is remembered by that
+browser so each device can keep an appropriate layout. Pin or unpin an agent
+with its star control in the desktop rail or mobile agent picker. Pins are
+stored by the web service rather than in browser storage, so the same favorites
+appear over localhost, LAN, and Tailscale; pinned agents sort before the
+remaining discovered agents.
+
+The assistant-ui run-settings popover combines searchable model selection with
+the selected model's supported reasoning-effort choices and becomes a
+viewport-safe bottom sheet on narrow screens. Usage telemetry remains internal
+and is summarized through a context display that accumulates the conversation's
+newest per-turn snapshots; it reports a percentage only when the agent advertises
+a trustworthy context-window size. Structured reasoning is grouped into a
+stream-aware disclosure without reordering adjacent tool or answer parts.
+Typing `/` in an empty composer opens the available command triggers.
+
+## Public API
+
+<!-- public-api-inventory:start -->
+<!-- Generated by scripts/generate-public-api-docs.mjs. Do not edit by hand. -->
+
+Every symbol exported by each public code entrypoint is listed below.
+
+**`@mono-agent/web`**
+
+```text
+CreateWebThreadInput
+CreateWebUploadInput
+DEFAULT_WEB_HOST
+DEFAULT_WEB_PORT
+DiscoverOperatorAgentsOptions
+DiscoveredOperatorAgent
+PatchWebAgentInput
+PatchWebThreadInput
+StartWebServerOptions
+StartWebTurnInput
+WEB_API_VERSION
+WEB_MAX_ACTIVE_ATTACHMENT_TURN_BYTES
+WEB_MAX_CONCURRENT_UPLOADS
+WEB_MAX_FILES_PER_TURN
+WEB_MAX_QUEUED_ATTACHMENT_TURNS
+WEB_MAX_STAGED_UPLOADS
+WEB_MAX_STAGED_UPLOAD_BYTES
+WEB_MAX_TURN_ATTACHMENT_BYTES
+WEB_STAGED_UPLOAD_TTL_MS
+WebAgentStatus
+WebAgentSummary
+WebAttachment
+WebBootstrap
+WebConsoleError
+WebEvent
+WebEventType
+WebMessage
+WebMessagePart
+WebMessageStatus
+WebModelOption
+WebRunState
+WebRunStatus
+WebServerHandle
+WebStatePathOptions
+WebStatePaths
+WebThread
+WebThreadDetail
+defaultTraceRegistryDir
+defaultWebStateDir
+discoverOperatorAgents
+isTrustedOperatorBaseUrl
+operatorBaseUrlFromMetadata
+prepareWebState
+prepareWebStatePaths
+resetWebState
+resolveWebStatePaths
+startWebServer
+```
+
+<!-- public-api-inventory:end -->
+
+The primary exports are `startWebServer`, `prepareWebState`, `resetWebState`,
+`defaultWebStateDir`, the versioned `Web*` DTOs, API/upload limit constants, and
+the trace-registry discovery helpers. `startWebServer()` returns a handle with
+the actual bound address/port plus idempotent `stop()` and `close()` methods.
+
+The browser API is rooted at `/api/v1`:
+
+- `GET /bootstrap`, `PATCH /agents/:id`, and `GET/PATCH /threads/:id`
+- `POST /threads`, `/threads/:id/turns`, and `/threads/:id/cancel`
+- `POST /uploads`, `PUT/GET /uploads/:id/content`, and `DELETE /uploads/:id`
+- `GET /events` (SSE)
+
+`GET /healthz` is intentionally outside the versioned API for service probes.
+
+## Dependency Boundary
+
+The server depends only on the `core` `@mono-agent/agent-contracts` and
+`@mono-agent/config` packages, the `observability` trace-source registry, and
+Express. Its compiled browser bundle additionally contains the production graph
+from the isolated `webapp` lockfile: assistant-ui, Base UI, cmdk, React, and
+Workbox plus their transitive dependencies. The repository advisory and license
+gates audit that nested production graph separately because it ships inside this
+package even though it is not part of the root pnpm workspace. Running agents
+are reached over their loopback HTTP operator endpoints; this package does not
+import a communication adapter or another operator surface.
+
+## What This Package Does Not Own
+
+- Agent runtime/provider execution or conversation history inside an agent.
+- The operator-adapter HTTP server published by each agent.
+- CLI background-process, launchd, or conflict-safe Tailscale Serve lifecycle.
+- Session Recorder history/replay, which remains in `@mono-agent/session-web`.
+- Authentication. Network reachability is the intentional security boundary.
+- Host filesystem browsing: attachments come only from the browser device's
+  native file picker.
+
+## Verification
+
+```sh
+pnpm --filter @mono-agent/web run typecheck
+pnpm --filter @mono-agent/web run test
+pnpm --filter @mono-agent/web run build
+```

package/dist/contracts.d.ts

@@ -0,0 +1,151 @@
+/** Version of the browser-facing JSON and SSE contract. */
+export declare const WEB_API_VERSION: 1;
+export declare const WEB_MAX_FILES_PER_TURN = 10;
+export declare const WEB_MAX_TURN_ATTACHMENT_BYTES: number;
+export declare const WEB_STAGED_UPLOAD_TTL_MS: number;
+export declare const WEB_MAX_STAGED_UPLOAD_BYTES: number;
+export declare const WEB_MAX_STAGED_UPLOADS = 100;
+export declare const WEB_MAX_CONCURRENT_UPLOADS = 4;
+export declare const WEB_MAX_ACTIVE_ATTACHMENT_TURN_BYTES: number;
+export declare const WEB_MAX_QUEUED_ATTACHMENT_TURNS = 32;
+export type WebAgentStatus = "online" | "offline" | "degraded";
+export interface WebModelOption {
+    readonly effortLevels?: readonly string[];
+    readonly reasoning?: boolean;
+    readonly reasoningMode?: string;
+    readonly label?: string;
+    readonly contextWindow?: number;
+}
+export interface WebAgentSummary {
+    readonly sourceId: string;
+    readonly label: string;
+    readonly status: WebAgentStatus;
+    readonly pinned?: boolean;
+    readonly health?: string;
+    readonly supportsAttachments: boolean;
+    readonly models?: readonly string[];
+    readonly defaultModel?: string;
+    readonly defaultEffort?: string;
+    readonly efforts?: readonly string[];
+    readonly modelOptions?: Readonly<Record<string, WebModelOption>>;
+    readonly updatedAt: string;
+}
+export type WebRunStatus = "idle" | "running" | "complete" | "failed" | "cancelled" | "interrupted";
+export interface WebRunState {
+    readonly id?: string;
+    readonly status: WebRunStatus;
+    readonly startedAt?: string;
+    readonly finishedAt?: string;
+    readonly error?: {
+        readonly code?: string;
+        readonly message: string;
+    };
+    readonly model?: string;
+    readonly effort?: string;
+}
+export interface WebThread {
+    readonly id: string;
+    readonly sourceId: string;
+    readonly title: string;
+    readonly archivedAt: string | null;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly revision: number;
+    readonly lastMessagePreview?: string;
+    readonly messageCount: number;
+    readonly runState: WebRunState;
+    readonly canSend: boolean;
+    readonly canUpload: boolean;
+}
+export type WebMessageStatus = "running" | "complete" | "failed" | "cancelled" | "interrupted";
+export type WebMessagePart = {
+    readonly type: "text";
+    readonly text: string;
+} | {
+    readonly type: "reasoning";
+    readonly text: string;
+} | {
+    readonly type: "tool-call";
+    readonly toolCallId: string;
+    readonly toolName: string;
+    readonly args?: unknown;
+    readonly result?: unknown;
+    readonly status: "running" | "complete" | "failed";
+} | {
+    readonly type: "telemetry";
+    readonly event: string;
+    readonly data?: unknown;
+} | {
+    readonly type: "error";
+    readonly code?: string;
+    readonly message: string;
+};
+export interface WebAttachment {
+    readonly id: string;
+    readonly name: string;
+    readonly contentType: string;
+    readonly sizeBytes: number;
+    readonly kind: "image" | "document";
+    readonly status: "staged" | "committed";
+    readonly uploaded: boolean;
+    readonly createdAt: string;
+    readonly contentUrl?: string;
+}
+export interface WebMessage {
+    readonly id: string;
+    readonly threadId: string;
+    readonly turnId?: string;
+    readonly role: "user" | "assistant" | "system";
+    readonly parts: readonly WebMessagePart[];
+    readonly attachments: readonly WebAttachment[];
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly status: WebMessageStatus;
+}
+export interface WebThreadDetail {
+    readonly thread: WebThread;
+    readonly messages: readonly WebMessage[];
+}
+export interface WebBootstrap {
+    readonly version: typeof WEB_API_VERSION;
+    readonly agents: readonly WebAgentSummary[];
+    readonly threads: readonly WebThread[];
+    readonly currentThreadId?: string;
+    readonly limits: {
+        readonly maxFileBytes: number;
+        readonly maxFilesPerTurn: number;
+        readonly maxTurnBytes: number;
+        readonly accept: readonly string[];
+    };
+}
+export type WebEventType = "ready" | "agents.changed" | "threads.changed" | "thread.changed" | "message.changed" | "turn.changed" | "attachment.changed";
+export interface WebEvent {
+    readonly id: string;
+    readonly version: typeof WEB_API_VERSION;
+    readonly type: WebEventType;
+    readonly at: string;
+    readonly threadId?: string;
+    readonly payload?: unknown;
+}
+export interface CreateWebThreadInput {
+    readonly sourceId: string;
+}
+export interface PatchWebAgentInput {
+    readonly pinned: boolean;
+}
+export interface PatchWebThreadInput {
+    readonly title?: string;
+    readonly archived?: boolean;
+}
+export interface StartWebTurnInput {
+    readonly text?: string;
+    readonly attachmentIds?: readonly string[];
+    readonly model?: string;
+    readonly effort?: string;
+}
+export interface CreateWebUploadInput {
+    readonly name: string;
+    readonly contentType: string;
+    readonly sizeBytes?: number;
+}
+//# sourceMappingURL=contracts.d.ts.map

package/dist/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,eAAO,MAAM,eAAe,EAAG,CAAU,CAAC;AAE1C,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,6BAA6B,QAAmB,CAAC;AAC9D,eAAO,MAAM,wBAAwB,QAAsB,CAAC;AAC5D,eAAO,MAAM,2BAA2B,QAAoB,CAAC;AAC7D,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,oCAAoC,QAAmB,CAAC;AACrE,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAElD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,YAAY,GACpB,MAAM,GACN,SAAS,GACT,UAAU,GACV,QAAQ,GACR,WAAW,GACX,aAAa,CAAC;AAElB,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;AAE/F,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrD;IACE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CACpD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAC/E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,eAAe,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;KACpC,CAAC;CACH;AAED,MAAM,MAAM,YAAY,GACpB,OAAO,GACP,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,GACjB,cAAc,GACd,oBAAoB,CAAC;AAEzB,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,eAAe,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B"}

package/dist/contracts.js

@@ -0,0 +1,11 @@
+/** Version of the browser-facing JSON and SSE contract. */
+export const WEB_API_VERSION = 1;
+export const WEB_MAX_FILES_PER_TURN = 10;
+export const WEB_MAX_TURN_ATTACHMENT_BYTES = 64 * 1024 * 1024;
+export const WEB_STAGED_UPLOAD_TTL_MS = 24 * 60 * 60 * 1000;
+export const WEB_MAX_STAGED_UPLOAD_BYTES = 256 * 1024 * 1024;
+export const WEB_MAX_STAGED_UPLOADS = 100;
+export const WEB_MAX_CONCURRENT_UPLOADS = 4;
+export const WEB_MAX_ACTIVE_ATTACHMENT_TURN_BYTES = 64 * 1024 * 1024;
+export const WEB_MAX_QUEUED_ATTACHMENT_TURNS = 32;
+//# sourceMappingURL=contracts.js.map

package/dist/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../src/contracts.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAU,CAAC;AAE1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACrE,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,17 @@
+import { type TraceSourceListItem } from "@mono-agent/observability";
+export interface DiscoverOperatorAgentsOptions {
+    readonly registryDirs?: readonly string[];
+    readonly staleAfterMs?: number;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}
+export interface DiscoveredOperatorAgent {
+    readonly source: TraceSourceListItem;
+    readonly baseUrl?: string;
+    readonly apiKey?: string;
+}
+export declare function defaultTraceRegistryDir(env?: Readonly<Record<string, string | undefined>>): string;
+export declare function discoverOperatorAgents(options?: DiscoverOperatorAgentsOptions): Promise<readonly DiscoveredOperatorAgent[]>;
+export declare function operatorBaseUrlFromMetadata(metadata: Record<string, unknown> | undefined): string | undefined;
+/** Only loopback operator endpoints are trusted; manifests are local files but not an SSRF authority. */
+export declare function isTrustedOperatorBaseUrl(value: string): boolean;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAOA,OAAO,EAAuC,KAAK,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAK1G,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAAG,MAAM,CAK/G;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAmB7C;AAED,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAK7G;AAED,yGAAyG;AACzG,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAW/D"}

package/dist/discovery.js

@@ -0,0 +1,137 @@
+import { constants as fsConstants } from "node:fs";
+import { open } from "node:fs/promises";
+import { homedir } from "node:os";
+import { isAbsolute, resolve } from "node:path";
+import { parseEnv } from "node:util";
+import { isLoopbackHost } from "@mono-agent/agent-contracts";
+import { listTraceSources, mergeTraceSources } from "@mono-agent/observability";
+const BACKGROUND_SNAPSHOT_SCHEMA = "mono-agent.background-snapshot.v1";
+const MAX_LOCAL_CONFIGURATION_BYTES = 1024 * 1024;
+export function defaultTraceRegistryDir(env = process.env) {
+    const override = env.MONO_AGENT_TRACE_REGISTRY_DIR?.trim();
+    return resolve(override === undefined || override.length === 0
+        ? resolve(homedir(), ".mono-agent", "trace-sources")
+        : override);
+}
+export async function discoverOperatorAgents(options = {}) {
+    const env = options.env ?? process.env;
+    const registryDirs = normalizeRegistryDirs(options.registryDirs, env);
+    const results = await Promise.all(registryDirs.map(async (registryDir) => listTraceSources({
+        registryDir,
+        ...(options.staleAfterMs === undefined ? {} : { staleAfterMs: options.staleAfterMs }),
+    })));
+    const sources = mergeTraceSources(...results.map((result) => result.sources));
+    return Promise.all(sources
+        .filter((source) => source.health !== "stopped")
+        .map(async (source) => {
+        const baseUrl = operatorBaseUrlFromMetadata(source.metadata);
+        const apiKey = baseUrl === undefined ? undefined : await resolveOperatorApiKey(source, env);
+        return {
+            source,
+            ...(baseUrl === undefined ? {} : { baseUrl }),
+            ...(apiKey === undefined ? {} : { apiKey }),
+        };
+    }));
+}
+export function operatorBaseUrlFromMetadata(metadata) {
+    const channels = record(metadata?.channels);
+    const operator = record(channels?.tui);
+    if (operator?.kind !== "running" || typeof operator.baseUrl !== "string")
+        return undefined;
+    return isTrustedOperatorBaseUrl(operator.baseUrl) ? operator.baseUrl.replace(/\/+$/u, "") : undefined;
+}
+/** Only loopback operator endpoints are trusted; manifests are local files but not an SSRF authority. */
+export function isTrustedOperatorBaseUrl(value) {
+    if (value.trim().length === 0)
+        return false;
+    try {
+        const url = new URL(value);
+        return (url.protocol === "http:" || url.protocol === "https:")
+            && isLoopbackHost(url.hostname)
+            && url.username.length === 0
+            && url.password.length === 0;
+    }
+    catch {
+        return false;
+    }
+}
+async function resolveOperatorApiKey(source, env) {
+    const fromEnv = env.MONO_AGENT_TUI_API_KEY?.trim();
+    if (fromEnv !== undefined && fromEnv.length > 0)
+        return fromEnv;
+    if (source.configPath === undefined)
+        return undefined;
+    // Managed workers publish only the path/fingerprint of their selected
+    // dotenv. Read the one exact key locally; never copy secret values into the
+    // trace registry or browser-facing agent metadata.
+    const dotenvPath = dotenvPathFromMetadata(source);
+    if (dotenvPath !== undefined) {
+        const fromDotenv = await readDotenvOperatorApiKey(dotenvPath);
+        if (fromDotenv !== undefined)
+            return fromDotenv;
+    }
+    try {
+        const parsed = JSON.parse(await readOwnerRegularFile(source.configPath));
+        const key = typeof parsed.tui?.apiKey === "string" ? parsed.tui.apiKey.trim() : "";
+        return key.length === 0 ? undefined : key;
+    }
+    catch {
+        return undefined;
+    }
+}
+function dotenvPathFromMetadata(source) {
+    if (source.configPath === undefined)
+        return undefined;
+    const snapshot = record(source.metadata?.backgroundSnapshot);
+    if (snapshot?.schema !== BACKGROUND_SNAPSHOT_SCHEMA
+        || typeof snapshot.configPath !== "string"
+        || typeof snapshot.configFingerprint !== "string"
+        || typeof snapshot.dotenvPath !== "string"
+        || typeof snapshot.dotenvFingerprint !== "string"
+        || snapshot.configFingerprint.length === 0
+        || snapshot.dotenvFingerprint.length === 0
+        || !isAbsolute(snapshot.configPath)
+        || !isAbsolute(snapshot.dotenvPath)
+        || resolve(snapshot.configPath) !== resolve(source.configPath))
+        return undefined;
+    return resolve(snapshot.dotenvPath);
+}
+async function readDotenvOperatorApiKey(path) {
+    try {
+        const parsed = parseEnv(await readOwnerRegularFile(path));
+        const key = parsed.MONO_AGENT_TUI_API_KEY?.trim();
+        return key === undefined || key.length === 0 ? undefined : key;
+    }
+    catch {
+        // Discovery is best effort. A keyed agent will surface as unavailable
+        // rather than weakening the local-file checks or leaking parser details.
+        return undefined;
+    }
+}
+async function readOwnerRegularFile(path) {
+    const handle = await open(path, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK);
+    try {
+        const info = await handle.stat();
+        const currentUid = typeof process.getuid === "function" ? process.getuid() : undefined;
+        if (!info.isFile() || (currentUid !== undefined && info.uid !== currentUid)) {
+            throw new Error("Local agent configuration is not an owner-owned regular file.");
+        }
+        if (info.size > MAX_LOCAL_CONFIGURATION_BYTES) {
+            throw new Error("Local agent configuration exceeds its size limit.");
+        }
+        return await handle.readFile({ encoding: "utf8" });
+    }
+    finally {
+        await handle.close();
+    }
+}
+function normalizeRegistryDirs(values, env) {
+    const requested = values !== undefined && values.length > 0 ? values : [defaultTraceRegistryDir(env)];
+    return [...new Set(requested.map((value) => resolve(value)))];
+}
+function record(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAA4B,MAAM,2BAA2B,CAAC;AAE1G,MAAM,0BAA0B,GAAG,mCAAmC,CAAC;AACvE,MAAM,6BAA6B,GAAG,IAAI,GAAG,IAAI,CAAC;AAclD,MAAM,UAAU,uBAAuB,CAAC,MAAoD,OAAO,CAAC,GAAG;IACrG,MAAM,QAAQ,GAAG,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC5D,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC;QACpD,CAAC,CAAC,QAAQ,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAyC,EAAE;IAE3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,gBAAgB,CAAC;QACzF,WAAW;QACX,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;KACtF,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO;SACvB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;SAC/C,GAAG,CAAC,KAAK,EAAE,MAAM,EAAoC,EAAE;QACtD,MAAM,OAAO,GAAG,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5F,OAAO;YACL,MAAM;YACN,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,QAA6C;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3F,OAAO,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACxG,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;eACzD,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;eAC5B,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;eACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,MAA2B,EAC3B,GAAiD;IAEjD,MAAM,OAAO,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAChE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAEtD,sEAAsE;IACtE,4EAA4E;IAC5E,mDAAmD;IACnD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC9D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;IAClD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAmC,CAAC;QAC3G,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA2B;IACzD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC7D,IACE,QAAQ,EAAE,MAAM,KAAK,0BAA0B;WAC5C,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;WACvC,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ;WAC9C,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;WACvC,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ;WAC9C,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;WACvC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;WACvC,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;WAChC,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;WAChC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9D,OAAO,SAAS,CAAC;IACnB,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;QAClD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,yEAAyE;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,IAAI,EACJ,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CACvE,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,6BAA6B,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,MAAqC,EACrC,GAAiD;IAEjD,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;IACtG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,9 @@
+export declare class WebConsoleError extends Error {
+    readonly code: string;
+    readonly status: number;
+    readonly details?: Readonly<Record<string, unknown>>;
+    constructor(code: string, message: string, status?: number, details?: Record<string, unknown>);
+}
+export declare function errorMessage(error: unknown): string;
+export declare function errorCode(error: unknown): string | undefined;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBAEzC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAS3F;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAK5D"}

package/dist/errors.js

@@ -0,0 +1,25 @@
+export class WebConsoleError extends Error {
+    code;
+    status;
+    details;
+    constructor(code, message, status = 400, details) {
+        super(message);
+        this.name = "WebConsoleError";
+        this.code = code;
+        this.status = status;
+        if (details !== undefined) {
+            this.details = details;
+        }
+    }
+}
+export function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export function errorCode(error) {
+    if (typeof error !== "object" || error === null)
+        return undefined;
+    return typeof error.code === "string"
+        ? error.code
+        : undefined;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAS;IACb,MAAM,CAAS;IACf,OAAO,CAAqC;IAErD,YAAY,IAAY,EAAE,OAAe,EAAE,MAAM,GAAG,GAAG,EAAE,OAAiC;QACxF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,OAAQ,KAA4B,CAAC,IAAI,KAAK,QAAQ;QAC3D,CAAC,CAAE,KAA0B,CAAC,IAAI;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `@mono-agent/web` — persistent, always-on local/LAN browser console for
+ * discovering mono-agent instances and driving independent conversations.
+ */
+export { DEFAULT_WEB_HOST, DEFAULT_WEB_PORT, startWebServer, } from "./server.js";
+export type { StartWebServerOptions, WebServerHandle } from "./server.js";
+export { defaultWebStateDir, prepareWebState, prepareWebStatePaths, resetWebState, resolveWebStatePaths, } from "./state-paths.js";
+export type { WebStatePathOptions, WebStatePaths } from "./state-paths.js";
+export { defaultTraceRegistryDir, discoverOperatorAgents, isTrustedOperatorBaseUrl, operatorBaseUrlFromMetadata, } from "./discovery.js";
+export type { DiscoverOperatorAgentsOptions, DiscoveredOperatorAgent, } from "./discovery.js";
+export { WEB_API_VERSION, WEB_MAX_CONCURRENT_UPLOADS, WEB_MAX_ACTIVE_ATTACHMENT_TURN_BYTES, WEB_MAX_FILES_PER_TURN, WEB_MAX_STAGED_UPLOAD_BYTES, WEB_MAX_STAGED_UPLOADS, WEB_MAX_QUEUED_ATTACHMENT_TURNS, WEB_MAX_TURN_ATTACHMENT_BYTES, WEB_STAGED_UPLOAD_TTL_MS, } from "./contracts.js";
+export type { CreateWebThreadInput, CreateWebUploadInput, PatchWebAgentInput, PatchWebThreadInput, StartWebTurnInput, WebAgentStatus, WebAgentSummary, WebAttachment, WebBootstrap, WebEvent, WebEventType, WebMessage, WebMessagePart, WebMessageStatus, WebModelOption, WebRunState, WebRunStatus, WebThread, WebThreadDetail, } from "./contracts.js";
+export { WebConsoleError } from "./errors.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE3E,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,YAAY,EACZ,SAAS,EACT,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+/**
+ * `@mono-agent/web` — persistent, always-on local/LAN browser console for
+ * discovering mono-agent instances and driving independent conversations.
+ */
+export { DEFAULT_WEB_HOST, DEFAULT_WEB_PORT, startWebServer, } from "./server.js";
+export { defaultWebStateDir, prepareWebState, prepareWebStatePaths, resetWebState, resolveWebStatePaths, } from "./state-paths.js";
+export { defaultTraceRegistryDir, discoverOperatorAgents, isTrustedOperatorBaseUrl, operatorBaseUrlFromMetadata, } from "./discovery.js";
+export { WEB_API_VERSION, WEB_MAX_CONCURRENT_UPLOADS, WEB_MAX_ACTIVE_ATTACHMENT_TURN_BYTES, WEB_MAX_FILES_PER_TURN, WEB_MAX_STAGED_UPLOAD_BYTES, WEB_MAX_STAGED_UPLOADS, WEB_MAX_QUEUED_ATTACHMENT_TURNS, WEB_MAX_TURN_ATTACHMENT_BYTES, WEB_STAGED_UPLOAD_TTL_MS, } from "./contracts.js";
+export { WebConsoleError } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EACL,eAAe,EACf,0BAA0B,EAC1B,oCAAoC,EACpC,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,+BAA+B,EAC/B,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAuBxB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC"}

package/dist/operator-client.d.ts

@@ -0,0 +1,42 @@
+import { type AgentAttachment, type AgentStreamWireFrame } from "@mono-agent/agent-contracts";
+import type { WebModelOption } from "./contracts.js";
+export interface OperatorConnection {
+    readonly baseUrl: string;
+    readonly apiKey?: string;
+}
+export interface OperatorInfo {
+    readonly schema: number;
+    readonly label?: string;
+    readonly model?: string;
+    readonly effort?: string;
+    readonly models?: readonly string[];
+    readonly modelOptions?: Readonly<Record<string, WebModelOption>>;
+    readonly supportsAttachments: boolean;
+}
+export interface OperatorTurnInput {
+    readonly conversationId: string;
+    readonly text: string;
+    readonly attachments: readonly AgentAttachment[];
+    readonly metadata: Readonly<Record<string, unknown>>;
+    readonly signal: AbortSignal;
+    readonly onFrame: (frame: AgentStreamWireFrame) => void | Promise<void>;
+}
+export interface OperatorTurnResult {
+    readonly finalText?: string;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface OperatorClientOptions extends OperatorConnection {
+    readonly fetchImpl?: typeof fetch;
+}
+export declare class OperatorClient {
+    private readonly baseUrl;
+    private readonly apiKey;
+    private readonly fetchImpl;
+    constructor(options: OperatorClientOptions);
+    info(signal?: AbortSignal): Promise<OperatorInfo>;
+    turn(input: OperatorTurnInput): Promise<OperatorTurnResult>;
+    cancel(conversationId: string): Promise<void>;
+    private headers;
+    private request;
+}
+//# sourceMappingURL=operator-client.d.ts.map

package/dist/operator-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-client.d.ts","sourceRoot":"","sources":["../src/operator-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAUrD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IACjE,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,qBAAsB,SAAQ,kBAAkB;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACnC;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,qBAAqB;IASpC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAiCjD,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA+C3D,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUnD,OAAO,CAAC,OAAO;YAOD,OAAO;CAkBtB"}