@moxxy/plugin-channel-http 0.26.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Moxxy (moxxy.ai)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/channel.d.ts

@@ -0,0 +1,50 @@
+import type { ClientSession as Session } from '@moxxy/sdk';
+import type { Channel, ChannelHandle, ChannelStartOptsBase, PermissionResolver } from '@moxxy/sdk';
+export interface HttpChannelOptions {
+    readonly port?: number;
+    readonly host?: string;
+    /** Bearer token required on every protected route. If unset, auth is disabled (dev-only). */
+    readonly authToken?: string;
+    /** Max turns running concurrently on the shared session; excess requests get
+     *  a 429. Bounds provider-stream fan-out and history interleaving. */
+    readonly maxConcurrentTurns?: number;
+    /** Abort an SSE turn whose consumer has stalled (socket open but not reading)
+     *  for this many ms, so a half-open client can't keep a provider stream alive
+     *  forever. A live-but-slow consumer resets the timer on every flushed write.
+     *  Defaults to 120_000; set <= 0 to disable (not recommended for a network
+     *  bind). */
+    readonly streamStallMs?: number;
+    /**
+     * Tool names that the model is allowed to call without further interaction.
+     * This is the entire permission story for HTTP — there's no human in the
+     * loop to click "allow", so the operator declares trust upfront. Anything
+     * not in this list is denied.
+     */
+    readonly allowedTools?: ReadonlyArray<string>;
+    readonly logger?: {
+        info?(msg: string, meta?: Record<string, unknown>): void;
+        warn?(msg: string, meta?: Record<string, unknown>): void;
+    };
+}
+export interface HttpStartOpts extends ChannelStartOptsBase {
+    readonly session: Session;
+}
+export declare class HttpChannel implements Channel<HttpStartOpts> {
+    readonly name = "http";
+    readonly permissionResolver: PermissionResolver;
+    private readonly port;
+    private readonly host;
+    private readonly authToken;
+    private readonly maxConcurrentTurns;
+    private readonly streamStallMs;
+    private readonly logger;
+    private server;
+    private boundPortValue;
+    /** The actual TCP port the server bound to after {@link start}. Equals the
+     *  configured port, or the OS-assigned one when `port: 0` (ephemeral) — so
+     *  callers (and tests) can address the server without guessing a free port. */
+    get boundPort(): number;
+    constructor(opts?: HttpChannelOptions);
+    start(startOpts: HttpStartOpts): Promise<ChannelHandle>;
+}
+//# sourceMappingURL=channel.d.ts.map

package/dist/channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.d.ts","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAOpB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;0EACsE;IACtE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;iBAIa;IACb,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACzD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;KAC1D,CAAC;CACH;AAED,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,WAAY,YAAW,OAAO,CAAC,aAAa,CAAC;IACxD,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;IAChD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,cAAc,CAAK;IAE3B;;mFAE+E;IAC/E,IAAI,SAAS,IAAI,MAAM,CAEtB;gBAEW,IAAI,GAAE,kBAAuB;IAoBnC,KAAK,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;CA6H9D"}

package/dist/channel.js

@@ -0,0 +1,164 @@
+import { createServer } from 'node:http';
+import { createAllowListResolver, denyByDefaultResolver } from '@moxxy/sdk';
+import { routeRequest, TurnLimiter } from './router.js';
+/** Hosts auth-disabled mode is only safe to bind on. A non-loopback bind with
+ *  no token would expose an unauthenticated agent endpoint to the network. */
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', '::1', 'localhost', '::ffff:127.0.0.1']);
+export class HttpChannel {
+    name = 'http';
+    permissionResolver;
+    port;
+    host;
+    authToken;
+    maxConcurrentTurns;
+    streamStallMs;
+    logger;
+    server = null;
+    boundPortValue = 0;
+    /** The actual TCP port the server bound to after {@link start}. Equals the
+     *  configured port, or the OS-assigned one when `port: 0` (ephemeral) — so
+     *  callers (and tests) can address the server without guessing a free port. */
+    get boundPort() {
+        return this.boundPortValue;
+    }
+    constructor(opts = {}) {
+        this.port = opts.port ?? 3737;
+        this.host = opts.host ?? '127.0.0.1';
+        this.authToken = opts.authToken ?? null;
+        this.maxConcurrentTurns =
+            typeof opts.maxConcurrentTurns === 'number' && opts.maxConcurrentTurns > 0
+                ? Math.floor(opts.maxConcurrentTurns)
+                : 4;
+        // undefined => router uses its DEFAULT_STREAM_STALL_MS; a finite number
+        // (including <= 0 to disable) is honored as-is.
+        this.streamStallMs =
+            typeof opts.streamStallMs === 'number' && Number.isFinite(opts.streamStallMs)
+                ? opts.streamStallMs
+                : undefined;
+        this.logger = opts.logger;
+        this.permissionResolver = opts.allowedTools && opts.allowedTools.length > 0
+            ? createAllowListResolver([...opts.allowedTools])
+            : denyByDefaultResolver;
+    }
+    async start(startOpts) {
+        // Guard against a double-start: unconditionally reassigning `this.server`
+        // would orphan the first server (its port stays bound, sockets stay open)
+        // since `stop()` only ever closes the most-recently-assigned one.
+        if (this.server) {
+            throw new Error('HttpChannel is already started — call stop() before starting again.');
+        }
+        // Refuse to expose an unauthenticated agent endpoint to the network. With
+        // no token the only gate is the deny-by-default tool resolver; a
+        // non-loopback bind would still let anyone reach /v1/turn.
+        if (this.authToken === null && !LOOPBACK_HOSTS.has(this.host)) {
+            throw new Error(`HttpChannel refuses to bind non-loopback host "${this.host}" without an authToken. ` +
+                'Set authToken (or MOXXY_HTTP_TOKEN), or bind 127.0.0.1.');
+        }
+        const ctx = {
+            session: startOpts.session,
+            authToken: this.authToken,
+            logger: this.logger,
+            turnLimiter: new TurnLimiter(this.maxConcurrentTurns),
+            ...(this.streamStallMs !== undefined ? { streamStallMs: this.streamStallMs } : {}),
+        };
+        const server = createServer(async (req, res) => {
+            const handler = routeRequest(req);
+            if (!handler) {
+                res.writeHead(404, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ error: 'not_found', path: req.url }));
+                return;
+            }
+            try {
+                await handler(req, res, ctx);
+            }
+            catch (err) {
+                // Log the full error server-side; return a generic message so internal
+                // paths/provider details can't leak to a (possibly remote) caller.
+                this.logger?.warn?.('http handler threw', { err: String(err) });
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'content-type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'internal' }));
+                }
+                else {
+                    try {
+                        res.end();
+                    }
+                    catch { /* ignore */ }
+                }
+            }
+        });
+        // Tighten timeouts so a slow-loris client can't tie up sockets by dribbling
+        // headers/bodies. Defaults (requestTimeout 300s) are too generous for an
+        // agent endpoint. Cap total connections so a flood can't exhaust handles.
+        server.headersTimeout = 10_000;
+        server.requestTimeout = 30_000;
+        server.keepAliveTimeout = 5_000;
+        server.maxConnections = 256;
+        this.server = server;
+        // `running` rejects on a post-listen server error and resolves on a clean
+        // close. Declared up front so the persistent error handler installed below
+        // (after the listen-scoped one is detached) can settle it.
+        let rejectRunning;
+        let resolveRunning;
+        const running = new Promise((resolve, reject) => {
+            resolveRunning = resolve;
+            rejectRunning = reject;
+        });
+        // A fire-and-forget caller may never attach a .catch; without this default
+        // observer a post-listen server error escalates to a process-level
+        // unhandledRejection (fatal under --unhandled-rejections=strict). Real
+        // awaiters still see the rejection — a settled promise fans out to all.
+        running.catch(() => { });
+        const listening = new Promise((resolve, reject) => {
+            // Scoped to the listen handshake only — detached once we're listening so
+            // it can't no-op on the already-settled promise (and swallow runtime
+            // errors). The persistent handler below takes over afterwards.
+            const onListenError = (err) => reject(err);
+            server.once('error', onListenError);
+            server.listen(this.port, this.host, () => {
+                server.off('error', onListenError);
+                // A runtime server error after listen would otherwise be unhandled
+                // (Node re-throws an 'error' with no listener). Log it and fail the
+                // `running` promise so callers awaiting it observe the crash instead of
+                // mistaking it for a clean shutdown.
+                server.on('error', (err) => {
+                    this.logger?.warn?.('http server error', { err: String(err) });
+                    rejectRunning(err);
+                });
+                const addr = server.address();
+                this.boundPortValue = typeof addr === 'object' && addr ? addr.port : this.port;
+                this.logger?.info?.('http channel listening', {
+                    host: this.host,
+                    port: this.boundPortValue,
+                    authEnabled: this.authToken !== null,
+                });
+                resolve();
+            });
+        });
+        await listening;
+        server.once('close', () => resolveRunning());
+        return {
+            running,
+            stop: async () => {
+                const srv = this.server;
+                // Clear the handle first so a concurrent/double stop() is a no-op rather
+                // than racing two close() calls on the same server (the second close
+                // gets an 'ERR_SERVER_NOT_RUNNING' error in its callback).
+                if (this.server === srv) {
+                    this.server = null;
+                    this.boundPortValue = 0;
+                }
+                await new Promise((resolve) => {
+                    if (!srv)
+                        return resolve();
+                    srv.close((err) => {
+                        if (err)
+                            this.logger?.warn?.('http server close error', { err: String(err) });
+                        resolve();
+                    });
+                });
+            },
+        };
+    }
+}
+//# sourceMappingURL=channel.js.map

package/dist/channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel.js","sourceRoot":"","sources":["../src/channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAQ5E,OAAO,EAAE,YAAY,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AAE5E;8EAC8E;AAC9E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAiCtF,MAAM,OAAO,WAAW;IACb,IAAI,GAAG,MAAM,CAAC;IACd,kBAAkB,CAAqB;IAC/B,IAAI,CAAS;IACb,IAAI,CAAS;IACb,SAAS,CAAgB;IACzB,kBAAkB,CAAS;IAC3B,aAAa,CAAqB;IAClC,MAAM,CAA+B;IAC9C,MAAM,GAAkB,IAAI,CAAC;IAC7B,cAAc,GAAG,CAAC,CAAC;IAE3B;;mFAE+E;IAC/E,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,YAAY,OAA2B,EAAE;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,kBAAkB;YACrB,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ,IAAI,IAAI,CAAC,kBAAkB,GAAG,CAAC;gBACxE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC;gBACrC,CAAC,CAAC,CAAC,CAAC;QACR,wEAAwE;QACxE,gDAAgD;QAChD,IAAI,CAAC,aAAa;YAChB,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC,aAAa;gBACpB,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YACzE,CAAC,CAAC,uBAAuB,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;YACjD,CAAC,CAAC,qBAAqB,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAwB;QAClC,0EAA0E;QAC1E,0EAA0E;QAC1E,kEAAkE;QAClE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,0EAA0E;QAC1E,iEAAiE;QACjE,2DAA2D;QAC3D,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CACb,kDAAkD,IAAI,CAAC,IAAI,0BAA0B;gBACnF,yDAAyD,CAC5D,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAkB;YACzB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAiC;YAC9C,WAAW,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC;QAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uEAAuE;gBACvE,mEAAmE;gBACnE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC;wBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,4EAA4E;QAC5E,yEAAyE;QACzE,0EAA0E;QAC1E,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;QAC/B,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC;QAE5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,0EAA0E;QAC1E,2EAA2E;QAC3E,2DAA2D;QAC3D,IAAI,aAAsC,CAAC;QAC3C,IAAI,cAA2B,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpD,cAAc,GAAG,OAAO,CAAC;YACzB,aAAa,GAAG,MAAM,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAExB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtD,yEAAyE;YACzE,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,aAAa,GAAG,CAAC,GAAY,EAAQ,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBACnC,mEAAmE;gBACnE,oEAAoE;gBACpE,wEAAwE;gBACxE,qCAAqC;gBACrC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAY,EAAE,EAAE;oBAClC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/D,aAAa,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,CAAC,cAAc,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC/E,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,wBAAwB,EAAE;oBAC5C,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,IAAI,EAAE,IAAI,CAAC,cAAc;oBACzB,WAAW,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;iBACrC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC;QAEhB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC;QAE7C,OAAO;YACL,OAAO;YACP,IAAI,EAAE,KAAK,IAAI,EAAE;gBACf,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC;gBACxB,yEAAyE;gBACzE,qEAAqE;gBACrE,2DAA2D;gBAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC;gBAC1B,CAAC;gBACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,CAAC,GAAG;wBAAE,OAAO,OAAO,EAAE,CAAC;oBAC3B,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBAChB,IAAI,GAAG;4BAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAC9E,OAAO,EAAE,CAAC;oBACZ,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+import { type Plugin } from '@moxxy/sdk';
+export { HttpChannel, type HttpChannelOptions, type HttpStartOpts } from './channel.js';
+export { routeRequest, handleHealth, handleTurn, handleTurnStream, handleTurnAudio, turnRequestSchema, type TurnRequest, type RouterContext, type RouteHandler, } from './router.js';
+export declare const httpChannelDef: import("@moxxy/sdk").ChannelDef<import("./channel.js").HttpStartOpts>;
+export declare const httpChannelPlugin: Plugin;
+export default httpChannelPlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAGtE,OAAO,EAAE,WAAW,EAAE,KAAK,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,cAAc,uEAiCzB,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,MAI9B,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,44 @@
+import { defineChannel, definePlugin } from '@moxxy/sdk';
+import { HttpChannel } from './channel.js';
+export { HttpChannel } from './channel.js';
+export { routeRequest, handleHealth, handleTurn, handleTurnStream, handleTurnAudio, turnRequestSchema, } from './router.js';
+export const httpChannelDef = defineChannel({
+    name: 'http',
+    description: 'Request-response HTTP channel. POST /v1/turn + SSE streaming. Bearer-token auth + allow-list perms.',
+    create: (deps) => {
+        const opts = deps.options ?? {};
+        return new HttpChannel({
+            port: typeof opts.port === 'number' ? opts.port : undefined,
+            host: typeof opts.host === 'string' ? opts.host : undefined,
+            authToken: typeof opts.authToken === 'string' ? opts.authToken : process.env.MOXXY_HTTP_TOKEN,
+            allowedTools: Array.isArray(opts.allowedTools) ? opts.allowedTools : undefined,
+            maxConcurrentTurns: typeof opts.maxConcurrentTurns === 'number' ? opts.maxConcurrentTurns : undefined,
+            streamStallMs: typeof opts.streamStallMs === 'number' ? opts.streamStallMs : undefined,
+            logger: deps.logger,
+        });
+    },
+    isAvailable: async (deps) => {
+        const tools = deps.options?.['allowedTools'];
+        const authToken = deps.options?.['authToken'] ?? process.env.MOXXY_HTTP_TOKEN;
+        if (!authToken) {
+            return {
+                ok: false,
+                reason: "No auth token. Set MOXXY_HTTP_TOKEN or pass channels.http.authToken in moxxy.config.ts.",
+            };
+        }
+        if (!Array.isArray(tools) || tools.length === 0) {
+            return {
+                ok: false,
+                reason: 'No allowed-tools list. The HTTP channel needs an upfront tool allow-list since there is no human in the loop. Set channels.http.allowedTools in moxxy.config.ts.',
+            };
+        }
+        return { ok: true };
+    },
+});
+export const httpChannelPlugin = definePlugin({
+    name: '@moxxy/plugin-channel-http',
+    version: '0.0.0',
+    channels: [httpChannelDef],
+});
+export default httpChannelPlugin;
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAe,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,WAAW,EAA+C,MAAM,cAAc,CAAC;AACxF,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,iBAAiB,GAIlB,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC;IAC1C,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,qGAAqG;IAClH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAChC,OAAO,IAAI,WAAW,CAAC;YACrB,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC3D,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAC3D,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB;YAC7F,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,YAAyB,CAAC,CAAC,CAAC,SAAS;YAC5F,kBAAkB,EAAE,OAAO,IAAI,CAAC,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;YACrG,aAAa,EAAE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;YACtF,MAAM,EAAE,IAAI,CAAC,MAAe;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,yFAAyF;aAClG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,kKAAkK;aACrK,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAW,YAAY,CAAC;IACpD,IAAI,EAAE,4BAA4B;IAClC,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,CAAC,cAAc,CAAC;CAC3B,CAAC,CAAC;AAEH,eAAe,iBAAiB,CAAC"}

package/dist/router.d.ts

@@ -0,0 +1,95 @@
+import { z } from 'zod';
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { ClientSession as Session } from '@moxxy/sdk';
+import type { MoxxyEvent } from '@moxxy/sdk';
+export declare const turnRequestSchema: z.ZodObject<{
+    prompt: z.ZodString;
+    model: z.ZodOptional<z.ZodString>;
+    systemPrompt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    prompt: string;
+    model?: string | undefined;
+    systemPrompt?: string | undefined;
+}, {
+    prompt: string;
+    model?: string | undefined;
+    systemPrompt?: string | undefined;
+}>;
+export type TurnRequest = z.infer<typeof turnRequestSchema>;
+/**
+ * Counting semaphore gating how many turns run concurrently on the single
+ * shared session. The HTTP server otherwise accepts unlimited parallel
+ * requests, each calling `session.runTurn` on the SAME session — N concurrent
+ * clients would spawn N provider streams (cost/memory/connection blowup) and
+ * interleave one shared conversation history. `tryAcquire` is non-blocking so
+ * excess requests get a fast 429 instead of queueing unbounded.
+ */
+export declare class TurnLimiter {
+    private readonly max;
+    private inUse;
+    constructor(max: number);
+    tryAcquire(): boolean;
+    release(): void;
+    get active(): number;
+}
+export interface RouterContext {
+    readonly session: Session;
+    readonly authToken: string | null;
+    readonly logger?: {
+        warn(msg: string, meta?: Record<string, unknown>): void;
+    };
+    /** Bounds concurrent in-flight turns on the shared session. Optional so
+     *  existing embedders/tests keep working unbounded; the channel always
+     *  supplies one. */
+    readonly turnLimiter?: TurnLimiter;
+    /** Abort an SSE turn whose consumer has stalled (socket open but not reading)
+     *  for this many ms. Bounds the backpressure park in {@link handleTurnStream}
+     *  so a half-open client can't keep a provider stream (and billing) alive
+     *  forever. Optional; defaults to {@link DEFAULT_STREAM_STALL_MS}. */
+    readonly streamStallMs?: number;
+}
+/** Default write-side idle timeout for an SSE turn. A live-but-slow consumer
+ *  resets this on every flushed write; only a truly stalled (open-but-silent)
+ *  reader trips it, at which point we abort the turn — the same outcome as a
+ *  clean disconnect, just without waiting for a TCP close that may never come.
+ *  Generous so normal inter-event gaps (model thinking, tool calls) don't trip
+ *  it. */
+export declare const DEFAULT_STREAM_STALL_MS = 120000;
+export type RouteHandler = (req: IncomingMessage, res: ServerResponse, ctx: RouterContext) => Promise<void>;
+/** Match HTTP request to a handler. Returns null if no route matches. */
+export declare function routeRequest(req: IncomingMessage): RouteHandler | null;
+export declare function handleHealth(_req: IncomingMessage, res: ServerResponse): Promise<void>;
+/** Run options forwarded to `session.runTurn`, minus the abort `signal`
+ *  (which `driveTurn` owns). */
+export type TurnRunOptions = Omit<Parameters<Session['runTurn']>[1] & object, 'signal'>;
+/** Hard cap on events buffered for a single non-streaming turn. The buffered
+ *  path holds every event in memory and returns them in one JSON blob; a
+ *  runaway/tool-looping turn could otherwise grow this without bound. Once
+ *  exceeded we abort the turn rather than keep allocating. Generous enough that
+ *  no normal turn hits it. */
+export declare const MAX_BUFFERED_EVENTS = 50000;
+/**
+ * Drive a single buffered (non-streaming) turn to completion: drain every
+ * event, abort the turn if the client hangs up (so the model stops billing
+ * with nobody listening), and pull out the final assistant message. Shared by
+ * `handleTurn` and `handleTurnAudio` so the abort wiring and event/assistant
+ * extraction live in exactly one place. Re-throws on turn failure so each
+ * caller can shape its own error reply.
+ */
+export declare function driveTurn(session: Session, prompt: string, runOptions: TurnRunOptions, res: ServerResponse): Promise<{
+    events: MoxxyEvent[];
+    assistant: string;
+}>;
+export declare function handleTurn(req: IncomingMessage, res: ServerResponse, ctx: RouterContext): Promise<void>;
+/**
+ * Audio-in turn. Designed for iOS Shortcuts and curl: the client POSTs
+ * raw audio bytes with `Content-Type: audio/<format>`. Optional query
+ * params (`model`, `language`, `systemPrompt`) tune the run.
+ *
+ * The session must have an active Transcriber registered (e.g. via
+ * `@moxxy/plugin-stt-whisper`); without one the endpoint returns 503
+ * rather than transparently dropping the audio.
+ */
+export declare function handleTurnAudio(req: IncomingMessage, res: ServerResponse, ctx: RouterContext): Promise<void>;
+export declare function handleTurnStream(req: IncomingMessage, res: ServerResponse, ctx: RouterContext): Promise<void>;
+//# sourceMappingURL=router.d.ts.map

package/dist/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,IAAI,OAAO,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAI5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;GAOG;AACH,qBAAa,WAAW;IAEV,OAAO,CAAC,QAAQ,CAAC,GAAG;IADhC,OAAO,CAAC,KAAK,CAAK;gBACW,GAAG,EAAE,MAAM;IACxC,UAAU,IAAI,OAAO;IAKrB,OAAO,IAAI,IAAI;IAGf,IAAI,MAAM,IAAI,MAAM,CAEnB;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;KAAE,CAAC;IAC9E;;wBAEoB;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;0EAGsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED;;;;;UAKU;AACV,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAE/C,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAgB5G,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,YAAY,GAAG,IAAI,CAWtE;AAED,wBAAsB,YAAY,CAChC,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAGf;AAuBD;gCACgC;AAChC,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC;AAExF;;;;8BAI8B;AAC9B,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAE1C;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,cAAc,EAC1B,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBtD;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAuCf;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAsFf;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAyGf"}