@nextclaw/server 0.12.26-beta.3 → 0.12.26-beta.4

package/dist/index.js

@@ -11,7 +11,7 @@ import { ConfigSchema, DEFAULT_WORKSPACE_PATH, buildConfigSchema, createAgentPro
 import { homedir } from "node:os";
 import { findBuiltinProviderByName, listBuiltinProviders } from "@nextclaw/runtime";
 import { McpInstalledViewService } from "@nextclaw/mcp";
-import { isPanelAppError } from "@nextclaw/kernel";
+import { isPanelAppError, isServiceAppError } from "@nextclaw/kernel";
 import { serveStatic } from "hono/serve-static";
 //#region src/features/auth/utils/auth-bridge.utils.ts
 const REMOTE_BRIDGE_DIR = join(getDataDir(), "remote");
@@ -4009,7 +4009,7 @@ var RuntimeUpdateRoutesController = class {
 //#endregion
 //#region src/features/panel-apps/controllers/panel-apps.controller.ts
 function statusForPanelAppError(code) {
-	return code === "PANEL_APP_NOT_FOUND" ? 404 : 400;
+	return code === "PANEL_APP_NOT_FOUND" || code === "PANEL_APP_BRIDGE_SESSION_NOT_FOUND" ? 404 : 400;
 }
 var PanelAppsRoutesController = class {
 	constructor(panelAppManager) {
@@ -4052,6 +4052,165 @@ var PanelAppsRoutesController = class {
 			throw error;
 		}
 	};
+	getPanelAppBridgeScript = () => {
+		return new Response(this.panelAppManager.getPanelAppBridgeScript(), { headers: {
+			"content-type": "application/javascript; charset=utf-8",
+			"cache-control": "no-store"
+		} });
+	};
+	createBridgeSession = async (c) => {
+		const body = await readJson(c.req.raw);
+		if (!body.ok || !isRecord$1(body.data) || typeof body.data.panelAppId !== "string" || typeof body.data.tabId !== "string") return c.json(err("INVALID_PANEL_APP_BRIDGE_SESSION", "invalid bridge session request"), 400);
+		try {
+			const session = await this.panelAppManager.createPanelAppBridgeSession({
+				id: body.data.panelAppId,
+				tabId: body.data.tabId
+			});
+			return c.json(ok({
+				id: session.id,
+				token: session.token,
+				panelAppId: session.panelAppId,
+				tabId: session.tabId,
+				expiresAt: session.expiresAt
+			}));
+		} catch (error) {
+			if (isPanelAppError(error)) return c.json(err(error.code, error.message), statusForPanelAppError(error.code));
+			throw error;
+		}
+	};
+	deleteBridgeSession = (c) => {
+		this.panelAppManager.deletePanelAppBridgeSession(c.req.param("token"));
+		return c.json(ok({ deleted: true }));
+	};
+};
+//#endregion
+//#region src/features/service-apps/controllers/service-apps.controller.ts
+const PANEL_BRIDGE_SESSION_HEADER = "x-nextclaw-panel-bridge-session";
+function statusForServiceAppError(code) {
+	switch (code) {
+		case "AUTHORIZATION_REQUIRED": return 401;
+		case "SERVICE_APP_ACTION_NOT_DECLARED": return 403;
+		case "SERVICE_APP_ACTION_NOT_FOUND":
+		case "SERVICE_APP_NOT_FOUND": return 404;
+		default: return 400;
+	}
+}
+var ServiceAppsRoutesController = class {
+	constructor(params) {
+		this.params = params;
+	}
+	listServiceApps = async (c) => {
+		return c.json(ok(await this.params.serviceAppManager.listServiceApps()));
+	};
+	getServiceApp = async (c) => {
+		try {
+			return c.json(ok(await this.params.serviceAppManager.getServiceApp(c.req.param("appId"))));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	listServiceActions = async (c) => {
+		try {
+			const bridgeSession = this.readOptionalBridgeSession(c);
+			const appId = c.req.query("appId")?.trim();
+			const actions = await this.params.serviceAppManager.listServiceActions(bridgeSession ? {
+				caller: bridgeSession.caller,
+				appId,
+				declaredActions: bridgeSession.declaredActions
+			} : { appId });
+			return c.json(ok({ actions }));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	discoverServiceAppActions = async (c) => {
+		try {
+			const actions = await this.params.serviceAppManager.discoverServiceAppActions(c.req.param("appId"));
+			return c.json(ok({ actions }));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	invokeServiceAction = async (c) => {
+		const body = await readJson(c.req.raw);
+		if (!body.ok || body.data !== void 0 && !isRecord$1(body.data)) return c.json(err("INVALID_SERVICE_ACTION_REQUEST", "invalid service action request"), 400);
+		try {
+			const bridgeSession = this.requireBridgeSession(c);
+			const payload = await this.params.serviceAppManager.invokeServiceAction(c.req.param("actionId"), {
+				caller: bridgeSession.caller,
+				declaredActions: bridgeSession.declaredActions,
+				input: isRecord$1(body.data.input) ? body.data.input : {}
+			});
+			return c.json(ok(payload));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	grantServiceAction = async (c) => {
+		try {
+			const bridgeSession = this.requireBridgeSession(c);
+			const payload = await this.params.serviceAppManager.grantServiceAction(c.req.param("actionId"), {
+				caller: bridgeSession.caller,
+				declaredActions: bridgeSession.declaredActions
+			});
+			return c.json(ok(payload));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	listServiceActionGrants = async (c) => {
+		return c.json(ok({ grants: await this.params.serviceAppManager.listServiceActionGrants() }));
+	};
+	revokeServiceAction = async (c) => {
+		try {
+			const bridgeSession = this.requireBridgeSession(c);
+			await this.params.serviceAppManager.revokeServiceAction(bridgeSession.caller, c.req.param("actionId"));
+			return c.json(ok({ revoked: true }));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	revokeServiceActionGrant = async (c) => {
+		const caller = this.readCallerQuery(c);
+		if (!caller) return c.json(err("INVALID_SERVICE_ACTION_CALLER", "invalid service action caller"), 400);
+		try {
+			await this.params.serviceAppManager.revokeServiceAction(caller, c.req.param("actionId"));
+			return c.json(ok({ revoked: true }));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	restartServiceApp = async (c) => {
+		try {
+			return c.json(ok(await this.params.serviceAppManager.restartServiceApp(c.req.param("appId"))));
+		} catch (error) {
+			return this.handleServiceAppError(c, error);
+		}
+	};
+	requireBridgeSession = (c) => {
+		const token = c.req.raw.headers.get(PANEL_BRIDGE_SESSION_HEADER)?.trim();
+		if (!token) throw new Error("panel app bridge session is required");
+		return this.params.panelAppManager.resolvePanelAppBridgeSession(token);
+	};
+	readOptionalBridgeSession = (c) => {
+		const token = c.req.raw.headers.get(PANEL_BRIDGE_SESSION_HEADER)?.trim();
+		return token ? this.params.panelAppManager.resolvePanelAppBridgeSession(token) : null;
+	};
+	readCallerQuery = (c) => {
+		const surface = c.req.query("surface");
+		const appId = c.req.query("appId")?.trim();
+		if (surface !== "panel-app" || !appId) return null;
+		return {
+			surface,
+			appId
+		};
+	};
+	handleServiceAppError = (c, error) => {
+		if (isServiceAppError(error)) return c.json(err(error.code, error.message), statusForServiceAppError(error.code));
+		if (isPanelAppError(error)) return c.json(err(error.code, error.message), 404);
+		if (error instanceof Error && error.message === "panel app bridge session is required") return c.json(err("PANEL_APP_BRIDGE_SESSION_REQUIRED", error.message), 401);
+		throw error;
+	};
 };
 //#endregion
 //#region src/app/utils/ncp-session-event-stream.utils.ts
@@ -4368,6 +4527,10 @@ function createUiRouteControllers(options, authService, marketplaceBaseUrl) {
 		ncpSession: new NcpSessionRoutesController(options),
 		ncpAsset: new NcpAssetRoutesController(options),
 		panelApps: new PanelAppsRoutesController(options.kernel.panelAppManager),
+		serviceApps: new ServiceAppsRoutesController({
+			panelAppManager: options.kernel.panelAppManager,
+			serviceAppManager: options.kernel.serviceAppManager
+		}),
 		serverPath: new ServerPathRoutesController(),
 		remote: remoteAccess ? new RemoteRoutesController(remoteAccess) : null,
 		runtimeControl: runtimeControl ? new RuntimeControlRoutesController(runtimeControl) : null,
@@ -4440,7 +4603,7 @@ var UiRouteRegistry = class {
 		]]);
 	};
 	register = () => {
-		const { agents, app, auth, config, cron, ncpAsset, ncpSession, panelApps, remote, runtimeControl, runtimeUpdate, serverPath } = this.controllers;
+		const { agents, app, auth, config, cron, ncpAsset, ncpSession, panelApps, serviceApps, remote, runtimeControl, runtimeUpdate, serverPath } = this.controllers;
 		this.mountRoutes([
 			[
 				"get",
@@ -4656,6 +4819,21 @@ var UiRouteRegistry = class {
 				"/api/panel-apps",
 				panelApps.list
 			],
+			[
+				"get",
+				"/api/panel-app-bridge.js",
+				panelApps.getPanelAppBridgeScript
+			],
+			[
+				"post",
+				"/api/panel-app-bridge-sessions",
+				panelApps.createBridgeSession
+			],
+			[
+				"delete",
+				"/api/panel-app-bridge-sessions/:token",
+				panelApps.deleteBridgeSession
+			],
 			[
 				"patch",
 				"/api/panel-apps/:id/preferences",
@@ -4671,6 +4849,56 @@ var UiRouteRegistry = class {
 				"/api/panel-apps/:id/content",
 				panelApps.getPanelAppContent
 			],
+			[
+				"get",
+				"/api/service-apps",
+				serviceApps.listServiceApps
+			],
+			[
+				"post",
+				"/api/service-apps/:appId/restart",
+				serviceApps.restartServiceApp
+			],
+			[
+				"post",
+				"/api/service-apps/:appId/actions/discover",
+				serviceApps.discoverServiceAppActions
+			],
+			[
+				"get",
+				"/api/service-apps/:appId",
+				serviceApps.getServiceApp
+			],
+			[
+				"get",
+				"/api/service-actions",
+				serviceApps.listServiceActions
+			],
+			[
+				"post",
+				"/api/service-actions/:actionId/invoke",
+				serviceApps.invokeServiceAction
+			],
+			[
+				"post",
+				"/api/service-actions/:actionId/grant",
+				serviceApps.grantServiceAction
+			],
+			[
+				"delete",
+				"/api/service-actions/:actionId/grant",
+				serviceApps.revokeServiceAction
+			],
+			[
+				"get",
+				"/api/service-action-grants",
+				serviceApps.listServiceActionGrants
+			],
+			[
+				"delete",
+				"/api/service-action-grants/:actionId",
+				serviceApps.revokeServiceActionGrant
+			],
 			[
 				"get",
 				"/api/server-paths/browse",
@@ -5001,6 +5229,6 @@ async function startUiServer(gateway) {
 	};
 }
 //#endregion
-export { ConfigRoutesController, PanelAppsRoutesController, RuntimeControlRoutesController, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, ensureUiBridgeSecret, executeConfigAction, getUiBridgeSecretPath, loadConfigOrDefault, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };
+export { ConfigRoutesController, PanelAppsRoutesController, RuntimeControlRoutesController, ServiceAppsRoutesController, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, ensureUiBridgeSecret, executeConfigAction, getUiBridgeSecretPath, loadConfigOrDefault, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };
 
 //# sourceMappingURL=index.js.map