@moxxy/plugin-channel-http 0.26.0

package/dist/router.js

@@ -0,0 +1,354 @@
+import { z } from 'zod';
+import { readRequestBody, bearerTokenMatches } from '@moxxy/sdk/server';
+export const turnRequestSchema = z.object({
+    prompt: z.string().min(1),
+    model: z.string().optional(),
+    systemPrompt: z.string().optional(),
+});
+/**
+ * Counting semaphore gating how many turns run concurrently on the single
+ * shared session. The HTTP server otherwise accepts unlimited parallel
+ * requests, each calling `session.runTurn` on the SAME session — N concurrent
+ * clients would spawn N provider streams (cost/memory/connection blowup) and
+ * interleave one shared conversation history. `tryAcquire` is non-blocking so
+ * excess requests get a fast 429 instead of queueing unbounded.
+ */
+export class TurnLimiter {
+    max;
+    inUse = 0;
+    constructor(max) {
+        this.max = max;
+    }
+    tryAcquire() {
+        if (this.inUse >= this.max)
+            return false;
+        this.inUse += 1;
+        return true;
+    }
+    release() {
+        if (this.inUse > 0)
+            this.inUse -= 1;
+    }
+    get active() {
+        return this.inUse;
+    }
+}
+/** Default write-side idle timeout for an SSE turn. A live-but-slow consumer
+ *  resets this on every flushed write; only a truly stalled (open-but-silent)
+ *  reader trips it, at which point we abort the turn — the same outcome as a
+ *  clean disconnect, just without waiting for a TCP close that may never come.
+ *  Generous so normal inter-event gaps (model thinking, tool calls) don't trip
+ *  it. */
+export const DEFAULT_STREAM_STALL_MS = 120_000;
+/** Shape an internal/server-side error for the wire: log the full detail
+ *  server-side and return a stable, generic message so filesystem paths,
+ *  provider internals, or system-prompt fragments embedded in `err` never leak
+ *  to a (possibly remote) caller. Client-input validation errors (400) are NOT
+ *  routed through this — echoing the caller's own malformed input is safe. */
+function publicError(ctx, logMsg, err) {
+    ctx.logger?.warn(logMsg, { err: err instanceof Error ? err.message : String(err) });
+    return 'internal error';
+}
+/** Match HTTP request to a handler. Returns null if no route matches. */
+export function routeRequest(req) {
+    const rawUrl = req.url ?? '/';
+    // Strip the query string before matching — `/v1/turn/audio?model=...`
+    // is the same route as `/v1/turn/audio`. The handler reads query
+    // params off req.url itself.
+    const pathname = rawUrl.split('?')[0] ?? rawUrl;
+    if (req.method === 'GET' && pathname === '/v1/health')
+        return handleHealth;
+    if (req.method === 'POST' && pathname === '/v1/turn')
+        return handleTurn;
+    if (req.method === 'POST' && pathname === '/v1/turn/stream')
+        return handleTurnStream;
+    if (req.method === 'POST' && pathname === '/v1/turn/audio')
+        return handleTurnAudio;
+    return null;
+}
+export async function handleHealth(_req, res) {
+    res.writeHead(200, { 'content-type': 'application/json' });
+    res.end(JSON.stringify({ status: 'ok' }));
+}
+function checkAuth(req, expected) {
+    if (!expected)
+        return true;
+    // Constant-time compare of the full `Bearer <token>` header so the token
+    // isn't recoverable byte-by-byte via response timing.
+    return bearerTokenMatches(req.headers.authorization, `Bearer ${expected}`);
+}
+async function readBody(req, max = 64 * 1024) {
+    return (await readRequestBody(req, max)).toString('utf8');
+}
+/** Audio uploads need a much larger cap than JSON; 10 MB covers a few
+ *  minutes of Opus voice (Telegram caps voice notes at 50 MB, but
+ *  realistic notes are well under that). */
+const DEFAULT_AUDIO_MAX = 10 * 1024 * 1024;
+function reply(res, status, body) {
+    res.writeHead(status, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(body));
+}
+/** Hard cap on events buffered for a single non-streaming turn. The buffered
+ *  path holds every event in memory and returns them in one JSON blob; a
+ *  runaway/tool-looping turn could otherwise grow this without bound. Once
+ *  exceeded we abort the turn rather than keep allocating. Generous enough that
+ *  no normal turn hits it. */
+export const MAX_BUFFERED_EVENTS = 50_000;
+/**
+ * Drive a single buffered (non-streaming) turn to completion: drain every
+ * event, abort the turn if the client hangs up (so the model stops billing
+ * with nobody listening), and pull out the final assistant message. Shared by
+ * `handleTurn` and `handleTurnAudio` so the abort wiring and event/assistant
+ * extraction live in exactly one place. Re-throws on turn failure so each
+ * caller can shape its own error reply.
+ */
+export async function driveTurn(session, prompt, runOptions, res) {
+    const controller = new AbortController();
+    const onClose = () => controller.abort();
+    res.on('close', onClose);
+    const events = [];
+    try {
+        for await (const event of session.runTurn(prompt, { ...runOptions, signal: controller.signal })) {
+            events.push(event);
+            if (events.length >= MAX_BUFFERED_EVENTS) {
+                controller.abort();
+                break;
+            }
+        }
+    }
+    finally {
+        res.off('close', onClose);
+    }
+    const finalAssistant = events.findLast((e) => e.type === 'assistant_message');
+    const assistant = finalAssistant && finalAssistant.type === 'assistant_message' ? finalAssistant.content : '';
+    return { events, assistant };
+}
+export async function handleTurn(req, res, ctx) {
+    if (!checkAuth(req, ctx.authToken)) {
+        reply(res, 401, { error: 'unauthorized' });
+        return;
+    }
+    let body;
+    try {
+        const raw = await readBody(req);
+        body = turnRequestSchema.parse(JSON.parse(raw));
+    }
+    catch (err) {
+        reply(res, 400, { error: 'bad_request', message: err instanceof Error ? err.message : String(err) });
+        return;
+    }
+    if (ctx.turnLimiter && !ctx.turnLimiter.tryAcquire()) {
+        reply(res, 429, { error: 'too_many_turns', message: 'concurrent turn limit reached; retry shortly' });
+        return;
+    }
+    let result;
+    try {
+        result = await driveTurn(ctx.session, body.prompt, {
+            ...(body.model ? { model: body.model } : {}),
+            ...(body.systemPrompt ? { systemPrompt: body.systemPrompt } : {}),
+        }, res);
+    }
+    catch (err) {
+        reply(res, 500, { error: 'turn_failed', message: publicError(ctx, 'http turn failed', err) });
+        return;
+    }
+    finally {
+        ctx.turnLimiter?.release();
+    }
+    reply(res, 200, { events: result.events, assistant: result.assistant });
+}
+/**
+ * Audio-in turn. Designed for iOS Shortcuts and curl: the client POSTs
+ * raw audio bytes with `Content-Type: audio/<format>`. Optional query
+ * params (`model`, `language`, `systemPrompt`) tune the run.
+ *
+ * The session must have an active Transcriber registered (e.g. via
+ * `@moxxy/plugin-stt-whisper`); without one the endpoint returns 503
+ * rather than transparently dropping the audio.
+ */
+export async function handleTurnAudio(req, res, ctx) {
+    if (!checkAuth(req, ctx.authToken)) {
+        reply(res, 401, { error: 'unauthorized' });
+        return;
+    }
+    const transcriber = ctx.session.transcribers.tryGetActive();
+    if (!transcriber) {
+        reply(res, 503, {
+            error: 'no_transcriber',
+            message: 'No active Transcriber on this session. Install @moxxy/plugin-stt-whisper (or another transcriber plugin) and activate it before POSTing audio.',
+        });
+        return;
+    }
+    const contentType = (req.headers['content-type'] ?? '').toLowerCase();
+    if (!contentType.startsWith('audio/')) {
+        reply(res, 415, {
+            error: 'unsupported_media_type',
+            message: "Expected Content-Type: audio/* (e.g. audio/ogg, audio/m4a, audio/mpeg).",
+        });
+        return;
+    }
+    let bytes;
+    try {
+        bytes = await readRequestBody(req, DEFAULT_AUDIO_MAX);
+    }
+    catch (err) {
+        reply(res, 413, { error: 'payload_too_large', message: err instanceof Error ? err.message : String(err) });
+        return;
+    }
+    if (bytes.length === 0) {
+        reply(res, 400, { error: 'empty_body', message: 'audio body is empty' });
+        return;
+    }
+    // Pull tuning params off the query string — keeping them out of the
+    // body lets the payload remain raw audio (cleanest curl / Shortcut flow).
+    const url = new URL(req.url ?? '/', 'http://localhost');
+    const model = url.searchParams.get('model') ?? undefined;
+    const language = url.searchParams.get('language') ?? undefined;
+    const promptHint = url.searchParams.get('prompt') ?? undefined;
+    const systemPrompt = url.searchParams.get('systemPrompt') ?? undefined;
+    let transcript;
+    try {
+        const result = await transcriber.transcribe(new Uint8Array(bytes), {
+            mimeType: contentType,
+            ...(language ? { language } : {}),
+            ...(promptHint ? { prompt: promptHint } : {}),
+        });
+        transcript = result.text.trim();
+    }
+    catch (err) {
+        reply(res, 502, { error: 'transcription_failed', message: publicError(ctx, 'http audio transcription failed', err) });
+        return;
+    }
+    if (!transcript) {
+        reply(res, 422, { error: 'empty_transcript', message: 'transcriber returned empty text' });
+        return;
+    }
+    if (ctx.turnLimiter && !ctx.turnLimiter.tryAcquire()) {
+        reply(res, 429, { error: 'too_many_turns', message: 'concurrent turn limit reached; retry shortly' });
+        return;
+    }
+    let result;
+    try {
+        result = await driveTurn(ctx.session, transcript, {
+            ...(model ? { model } : {}),
+            ...(systemPrompt ? { systemPrompt } : {}),
+        }, res);
+    }
+    catch (err) {
+        reply(res, 500, { error: 'turn_failed', message: publicError(ctx, 'http audio turn failed', err) });
+        return;
+    }
+    finally {
+        ctx.turnLimiter?.release();
+    }
+    reply(res, 200, { transcript, events: result.events, assistant: result.assistant });
+}
+export async function handleTurnStream(req, res, ctx) {
+    if (!checkAuth(req, ctx.authToken)) {
+        reply(res, 401, { error: 'unauthorized' });
+        return;
+    }
+    let body;
+    try {
+        const raw = await readBody(req);
+        body = turnRequestSchema.parse(JSON.parse(raw));
+    }
+    catch (err) {
+        reply(res, 400, { error: 'bad_request', message: err instanceof Error ? err.message : String(err) });
+        return;
+    }
+    if (ctx.turnLimiter && !ctx.turnLimiter.tryAcquire()) {
+        reply(res, 429, { error: 'too_many_turns', message: 'concurrent turn limit reached; retry shortly' });
+        return;
+    }
+    res.writeHead(200, {
+        'content-type': 'text/event-stream',
+        'cache-control': 'no-cache',
+        connection: 'keep-alive',
+    });
+    // Abort the turn when the client hangs up — without this the model keeps
+    // generating (and billing) with nothing consuming the SSE stream.
+    const controller = new AbortController();
+    const onClose = () => controller.abort();
+    res.on('close', onClose);
+    // Degrade, never crash: an unhandled 'error' on a ServerResponse is fatal
+    // (uncaughtException). Treat any response-socket error like a disconnect —
+    // abort the turn and let the finally clean up — instead of letting it
+    // propagate and take down the whole runner process.
+    const onError = (err) => {
+        ctx.logger?.warn('http stream response error', {
+            err: err instanceof Error ? err.message : String(err),
+        });
+        controller.abort();
+    };
+    res.on('error', onError);
+    // A stalled-but-open consumer (reads nothing, never closes the socket) would
+    // otherwise park `safeWrite` on 'drain' indefinitely, keeping the provider
+    // stream — and billing — alive forever. The request/keep-alive timeouts cover
+    // header/body reads, NOT an in-progress response. `res.setTimeout` fires on
+    // write-side socket inactivity; a live-but-slow consumer resets it on every
+    // flushed write, so only a true stall trips it. We abort (same as a close).
+    const stallMs = ctx.streamStallMs ?? DEFAULT_STREAM_STALL_MS;
+    if (stallMs > 0) {
+        res.setTimeout(stallMs, () => {
+            ctx.logger?.warn('http stream consumer stalled; aborting turn', { stallMs });
+            controller.abort();
+        });
+    }
+    // Respect TCP backpressure: a slow/stalled-but-open consumer would otherwise
+    // let Node's internal write queue grow unbounded (a tool-heavy turn emits
+    // thousands of large events) until OOM. When `write` returns false we pause
+    // until 'drain', escaping early if the turn is aborted (client gone/stalled).
+    const safeWrite = async (chunk) => {
+        if (res.writableEnded || res.destroyed)
+            return;
+        if (res.write(chunk))
+            return;
+        if (controller.signal.aborted)
+            return;
+        await new Promise((resolve) => {
+            const done = () => {
+                res.off('drain', done);
+                controller.signal.removeEventListener('abort', done);
+                resolve();
+            };
+            res.once('drain', done);
+            controller.signal.addEventListener('abort', done, { once: true });
+        });
+    };
+    try {
+        for await (const event of ctx.session.runTurn(body.prompt, {
+            ...(body.model ? { model: body.model } : {}),
+            ...(body.systemPrompt ? { systemPrompt: body.systemPrompt } : {}),
+            signal: controller.signal,
+        })) {
+            await safeWrite(`data: ${JSON.stringify(event)}\n\n`);
+        }
+        await safeWrite('data: [DONE]\n\n');
+    }
+    catch (err) {
+        await safeWrite(`event: error\ndata: ${JSON.stringify({ message: publicError(ctx, 'http stream turn failed', err) })}\n\n`);
+    }
+    finally {
+        res.off('close', onClose);
+        res.off('error', onError);
+        // Disarm the stall timer so it can't fire (and abort) after the stream has
+        // already settled, and so the timer doesn't keep a handle alive.
+        if (stallMs > 0) {
+            try {
+                res.setTimeout(0);
+            }
+            catch { /* response already torn down */ }
+        }
+        ctx.turnLimiter?.release();
+        // The client may have hung up mid-stream; end() on an already-ended/
+        // destroyed response throws ERR_STREAM_WRITE_AFTER_END.
+        if (!res.writableEnded && !res.destroyed) {
+            try {
+                res.end();
+            }
+            catch { /* socket already gone */ }
+        }
+    }
+}
+//# sourceMappingURL=router.js.map

package/dist/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAIxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IAEO;IADrB,KAAK,GAAG,CAAC,CAAC;IAClB,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAC5C,UAAU;QACR,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACzC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;YAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAiBD;;;;;UAKU;AACV,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAI/C;;;;8EAI8E;AAC9E,SAAS,WAAW,CAClB,GAAkB,EAClB,MAAc,EACd,GAAY;IAEZ,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,GAAoB;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAC9B,sEAAsE;IACtE,iEAAiE;IACjE,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACxE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,iBAAiB;QAAE,OAAO,gBAAgB,CAAC;IACrF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,gBAAgB;QAAE,OAAO,eAAe,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAqB,EACrB,GAAmB;IAEnB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,GAAoB,EAAE,QAAuB;IAC9D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,yEAAyE;IACzE,sDAAsD;IACtD,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,QAAQ,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI;IAC3D,OAAO,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC;AAED;;4CAE4C;AAC5C,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,SAAS,KAAK,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAC/D,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAMD;;;;8BAI8B;AAC9B,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAgB,EAChB,MAAc,EACd,UAA0B,EAC1B,GAAmB;IAEnB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEzB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,MAAM,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;gBACzC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IAC9E,MAAM,SAAS,GACb,cAAc,IAAI,cAAc,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAoB,EACpB,GAAmB,EACnB,GAAkB;IAElB,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,IAAI,MAAmD,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CACtB,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,MAAM,EACX;YACE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAoB,EACpB,GAAmB,EACnB,GAAkB;IAElB,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;IAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE;YACd,KAAK,EAAE,gBAAgB;YACvB,OAAO,EACL,gJAAgJ;SACnJ,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE;YACd,KAAK,EAAE,wBAAwB;YAC/B,OAAO,EAAE,yEAAyE;SACnF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACzE,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,0EAA0E;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;IACzD,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IAC/D,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAC/D,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;IAEvE,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE;YACjE,QAAQ,EAAE,WAAW;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;QACH,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,iCAAiC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtH,OAAO;IACT,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;QAC3F,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,IAAI,MAAmD,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,SAAS,CACtB,GAAG,CAAC,OAAO,EACX,UAAU,EACV;YACE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,EACD,GAAG,CACJ,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,wBAAwB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,OAAO;IACT,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAoB,EACpB,GAAmB,EACnB,GAAkB;IAElB,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrG,OAAO;IACT,CAAC;IAED,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,UAAU,EAAE,EAAE,CAAC;QACrD,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACjB,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,UAAU;QAC3B,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IAEH,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC/C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEzB,0EAA0E;IAC1E,2EAA2E;IAC3E,sEAAsE;IACtE,oDAAoD;IACpD,MAAM,OAAO,GAAG,CAAC,GAAY,EAAQ,EAAE;QACrC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,4BAA4B,EAAE;YAC7C,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACtD,CAAC,CAAC;QACH,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC,CAAC;IACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEzB,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,uBAAuB,CAAC;IAC7D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,6CAA6C,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC7E,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,KAAK,EAAE,KAAa,EAAiB,EAAE;QACvD,IAAI,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,SAAS;YAAE,OAAO;QAC/C,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO;QAC7B,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QACtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACvB,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACxB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE;YACzD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,EAAE,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,SAAS,CACb,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,yBAAyB,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAC3G,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1B,2EAA2E;QAC3E,iEAAiE;QACjE,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC;gBAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QAC3B,qEAAqE;QACrE,wDAAwD;QACxD,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC;gBAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@moxxy/plugin-channel-http",
+  "version": "0.26.0",
+  "description": "Request-response HTTP channel for moxxy. POST /v1/turn drives one turn synchronously; POST /v1/turn/stream returns Server-Sent Events. Bearer-token auth + allow-list permission flow (no human in the loop).",
+  "keywords": [
+    "moxxy",
+    "agent",
+    "channel",
+    "http",
+    "api"
+  ],
+  "homepage": "https://moxxy.ai",
+  "bugs": {
+    "url": "https://github.com/moxxy-ai/moxxy/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/moxxy-ai/moxxy.git",
+    "directory": "packages/plugin-channel-http"
+  },
+  "author": "Michal Makowski <michal.makowski97@gmail.com>",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "moxxy": {
+    "plugin": {
+      "entry": "./dist/index.js",
+      "kind": "channel"
+    }
+  },
+  "dependencies": {
+    "zod": "^3.24.0",
+    "@moxxy/sdk": "0.26.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "typescript": "^5.7.3",
+    "vitest": "^2.1.8",
+    "@moxxy/core": "0.26.0",
+    "@moxxy/mode-default": "0.26.0",
+    "@moxxy/testing": "0.0.44",
+    "@moxxy/runner": "0.2.30",
+    "@moxxy/tools-builtin": "0.0.39",
+    "@moxxy/tsconfig": "0.0.0",
+    "@moxxy/vitest-preset": "0.0.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  }
+}

package/src/attach.test.ts

@@ -0,0 +1,85 @@
+/**
+ * Channel-as-thin-client test: run the HttpChannel against a RemoteSession
+ * instead of a local Session. The session (provider + loop) lives in a
+ * RunnerServer; the HTTP channel is a separate "process" that attaches over a
+ * unix socket and proxies turns to the runner. This is the `moxxy http
+ * --attach` shape, end-to-end.
+ */
+import os from 'node:os';
+import path from 'node:path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { Session, autoAllowResolver, silentLogger } from '@moxxy/core';
+import { defineProvider, definePlugin } from '@moxxy/sdk';
+import { FakeProvider, textReply } from '@moxxy/testing';
+import { defaultModePlugin } from '@moxxy/mode-default';
+import {
+  startRunnerServer,
+  connectRemoteSession,
+  type RunnerServer,
+  type RemoteSession,
+} from '@moxxy/runner';
+import { HttpChannel } from './channel.js';
+import type { ChannelHandle } from '@moxxy/sdk';
+
+function buildRunnerSession(): Session {
+  const provider = new FakeProvider({ script: [textReply('hello via the runner')] });
+  const session = new Session({
+    cwd: process.cwd(),
+    logger: silentLogger,
+    permissionResolver: autoAllowResolver,
+  });
+  session.pluginHost.registerStatic(
+    definePlugin({
+      name: 'http-attach-shim',
+      providers: [
+        defineProvider({
+          name: provider.name,
+          models: [...provider.models],
+          createClient: () => provider,
+        }),
+      ],
+    }),
+  );
+  session.providers.setActive(provider.name);
+  session.pluginHost.registerStatic(defaultModePlugin);
+  return session;
+}
+
+function tmpSocket(): string {
+  return path.join(os.tmpdir(), `moxxy-http-attach-${Math.random().toString(36).slice(2, 10)}.sock`);
+}
+
+let server: RunnerServer | null = null;
+let remote: RemoteSession | null = null;
+let handle: ChannelHandle | null = null;
+
+afterEach(async () => {
+  await handle?.stop();
+  await remote?.close();
+  await server?.close();
+  handle = null;
+  remote = null;
+  server = null;
+});
+
+describe('HttpChannel attached to a runner', () => {
+  it('POST /v1/turn drives a turn on the remote runner session', async () => {
+    const socketPath = tmpSocket();
+    server = await startRunnerServer(buildRunnerSession(), { socketPath });
+    remote = await connectRemoteSession({ socketPath, role: 'http' });
+
+    const channel = new HttpChannel({ port: 0, host: '127.0.0.1', allowedTools: [] });
+    handle = await channel.start({ session: remote });
+
+    const res = await fetch(`http://127.0.0.1:${channel.boundPort}/v1/turn`, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify({ prompt: 'say hi' }),
+    });
+    expect(res.status).toBe(200);
+    const body = (await res.json()) as { events: Array<{ type: string }>; assistant: string };
+    expect(body.assistant).toContain('hello via the runner');
+    expect(body.events.some((e) => e.type === 'user_prompt')).toBe(true);
+    expect(body.events.some((e) => e.type === 'assistant_message')).toBe(true);
+  });
+});