@nodetool-ai/websocket 0.7.0-rc.22 → 0.8.1

package/dist/routes/public-apps.js

@@ -0,0 +1,99 @@
+/**
+ * The two unauthenticated routes a deployed mini app is served from.
+ *
+ *   GET  /api/apps/:token          → PublicApplication
+ *   POST /api/apps/:token/session  → PublicApplicationSession
+ *
+ * They sit outside `/api/applications` deliberately: everything under that
+ * prefix reads the caller's own library and stays behind auth, and a public
+ * route added there would be one `startsWith` away from exempting the rest.
+ * The prefix is the allowlist entry (`isPublicAppDeploymentRequest`), so the
+ * shape of the URL is what makes it public — not a flag inside a handler.
+ *
+ * Registered on every server; the handlers refuse outside production, so
+ * whether the surface exists is decided at request time by one predicate
+ * rather than by boot order.
+ */
+import { gzipSync } from "node:zlib";
+import { TRPCError } from "@trpc/server";
+import { publicApplication, publicApplicationSession } from "@nodetool-ai/protocol/api-schemas/applications.js";
+import { z } from "zod";
+import { GZIP_THRESHOLD } from "../lib/compression.js";
+import { createPublicApplicationSession, getPublicApplication } from "../lib/app-deployment-service.js";
+const publicAppParamsSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["token"],
+    properties: { token: { type: "string", minLength: 1 } }
+};
+const unavailableSchema = {
+    type: "object",
+    additionalProperties: false,
+    required: ["detail"],
+    properties: { detail: { type: "string" } }
+};
+function responseSchema(schema) {
+    const { $schema: _dialect, ...json } = z.toJSONSchema(schema, {
+        target: "draft-2020-12",
+        io: "input",
+        unrepresentable: "any"
+    });
+    return json;
+}
+const publicAppSchema = {
+    params: publicAppParamsSchema,
+    response: {
+        200: responseSchema(publicApplication),
+        404: unavailableSchema
+    }
+};
+const publicAppSessionSchema = {
+    params: publicAppParamsSchema,
+    response: {
+        200: responseSchema(publicApplicationSession),
+        404: unavailableSchema
+    }
+};
+function sendUnavailable(reply) {
+    reply
+        .header("cache-control", "no-store")
+        .code(404)
+        .send({ detail: "This app is not available" });
+}
+const publicAppRoutes = async (app, opts) => {
+    app.setErrorHandler((error, _request, reply) => {
+        if (error instanceof TRPCError && error.code === "NOT_FOUND") {
+            sendUnavailable(reply);
+            return;
+        }
+        // Hand anything else back to Fastify's own handler rather than deciding
+        // here what a visitor may learn about it.
+        reply.send(error);
+    });
+    // A released app document carries every pinned graph, so the one response a
+    // visitor gets can be large. The plugin compresses it itself: these routes
+    // no longer go through the request bridge, which used to do this.
+    app.addHook("onSend", async (request, reply, payload) => {
+        if (typeof payload !== "string" || payload.length < GZIP_THRESHOLD) {
+            return payload;
+        }
+        const accepted = request.headers["accept-encoding"];
+        if (typeof accepted !== "string" || !accepted.includes("gzip")) {
+            return payload;
+        }
+        const compressed = gzipSync(Buffer.from(payload));
+        reply.header("content-encoding", "gzip");
+        reply.header("content-length", compressed.byteLength);
+        return compressed;
+    });
+    app.get("/api/apps/:token", { schema: publicAppSchema }, async (req, reply) => {
+        const application = await getPublicApplication(req.params.token);
+        reply.header("cache-control", "no-store").send(application);
+    });
+    app.post("/api/apps/:token/session", { schema: publicAppSessionSchema }, async (req, reply) => {
+        const session = await createPublicApplicationSession(req.params.token, opts.appSessionSigningKey());
+        reply.header("cache-control", "no-store").send(session);
+    });
+};
+export default publicAppRoutes;
+//# sourceMappingURL=public-apps.js.map

package/dist/routes/public-apps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-apps.js","sourceRoot":"","sources":["../../src/routes/public-apps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,CAAC,EAAgB,MAAM,KAAK,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EACL,8BAA8B,EAC9B,oBAAoB,EACrB,MAAM,kCAAkC,CAAC;AAU1C,MAAM,qBAAqB,GAAG;IAC5B,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;CAC/C,CAAC;AAEX,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;CAClC,CAAC;AAEX,SAAS,cAAc,CAAC,MAAe;IACrC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE;QAC5D,MAAM,EAAE,eAAe;QACvB,EAAE,EAAE,OAAO;QACX,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,qBAAqB;IAC7B,QAAQ,EAAE;QACR,GAAG,EAAE,cAAc,CAAC,iBAAiB,CAAC;QACtC,GAAG,EAAE,iBAAiB;KACvB;CACF,CAAC;AAEF,MAAM,sBAAsB,GAAG;IAC7B,MAAM,EAAE,qBAAqB;IAC7B,QAAQ,EAAE;QACR,GAAG,EAAE,cAAc,CAAC,wBAAwB,CAAC;QAC7C,GAAG,EAAE,iBAAiB;KACvB;CACF,CAAC;AAEF,SAAS,eAAe,CAAC,KAAmB;IAC1C,KAAK;SACF,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;SACnC,IAAI,CAAC,GAAG,CAAC;SACT,IAAI,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,eAAe,GAA8C,KAAK,EACtE,GAAG,EACH,IAAI,EACJ,EAAE;IACF,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,KAAK,YAAY,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC7D,eAAe,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,0CAA0C;QAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,2EAA2E;IAC3E,kEAAkE;IAClE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACtD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACnE,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACpD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/D,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QACtD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,kBAAkB,EAClB,EAAE,MAAM,EAAE,eAAe,EAAE,EAC3B,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjE,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,0BAA0B,EAC1B,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAClC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,OAAO,GAAG,MAAM,8BAA8B,CAClD,GAAG,CAAC,MAAM,CAAC,KAAK,EAChB,IAAI,CAAC,oBAAoB,EAAE,CAC5B,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/sandbox-modules.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Sandbox module delivery: `GET /api/sandbox-modules/*`.
+ *
+ * The browser runner fetches guest module sources by **opaque module id** — a
+ * public entry specifier (`@acme/geo`) or an internal graph-file id
+ * (`@acme/geo::sandbox/helper.js`). Ids contain `/`, so the route is a wildcard
+ * and the id is whatever follows the prefix; Fastify percent-decodes the
+ * wildcard, so `@acme%2Fgeo` and `@acme/geo` name the same module.
+ *
+ * The route never touches the filesystem and never translates a path: it asks
+ * the catalog to authorize and retrieve in one call, and answers with what the
+ * catalog handed back.
+ */
+import type { FastifyPluginAsync } from "fastify";
+declare const sandboxModulesRoutes: FastifyPluginAsync;
+export default sandboxModulesRoutes;
+//# sourceMappingURL=sandbox-modules.d.ts.map

package/dist/routes/sandbox-modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-modules.d.ts","sourceRoot":"","sources":["../../src/routes/sandbox-modules.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAiBlD,QAAA,MAAM,oBAAoB,EAAE,kBA6E3B,CAAC;eAEa,oBAAoB"}

package/dist/routes/sandbox-modules.js

@@ -0,0 +1,85 @@
+import { getSandboxCatalog } from "../sandbox-catalog.js";
+import { getHttpRateLimitConfig } from "../lib/http-rate-limit.js";
+/**
+ * The URL is the *stable* module id, not the digest, so the body behind it
+ * changes whenever the pack is upgraded. `immutable` would let a browser or a
+ * proxy keep serving the old source without ever revalidating — the ETag below
+ * would never be consulted. `no-cache` still lets the client store the
+ * response; it just has to ask before reusing it, and the strong ETag turns
+ * that question into a 304 whenever nothing moved.
+ *
+ * `private` because delivery is authorized per client: a shared cache must not
+ * hold a private pack's source and hand it to the next requester.
+ */
+const REVALIDATE_CACHE_CONTROL = "private, no-cache";
+const sandboxModulesRoutes = async (app) => {
+    // The server registers @fastify/rate-limit globally, which already covers
+    // this route. The explicit per-route config restates the same bounds where
+    // a static analyzer (CodeQL js/missing-rate-limiting) can see them next to
+    // the authorization call.
+    const rateLimit = getHttpRateLimitConfig();
+    const routeConfig = {
+        rateLimit: {
+            max: rateLimit.enabled ? rateLimit.max : Number.MAX_SAFE_INTEGER,
+            timeWindow: rateLimit.timeWindow
+        }
+    };
+    app.get("/api/sandbox-modules/*", { config: routeConfig }, async (req, reply) => {
+        const moduleId = req.params["*"] ?? "";
+        if (moduleId.length === 0) {
+            return reply.status(404).send({ detail: "Not found" });
+        }
+        const catalog = getSandboxCatalog();
+        if (catalog === null) {
+            return reply.status(404).send({ detail: "Not found" });
+        }
+        const delivery = await catalog.authorizeDelivery(moduleId);
+        if (!delivery.authorized) {
+            // A refusal is an entitlement answer (403) or an absence (404). The
+            // catalog's message names the module id and nothing else.
+            const status = delivery.reason === "forbidden" ? 403 : 404;
+            return reply.status(status).send({ detail: delivery.message });
+        }
+        const etag = `"${delivery.contentDigest}"`;
+        reply
+            .header("Content-Type", delivery.mediaType)
+            .header("X-Content-Digest", delivery.contentDigest)
+            // The digest above versions the module graph — every file of one graph
+            // shares it. This is the hash of *this* body, which is what a client can
+            // actually verify before it executes the source.
+            .header("X-Content-Sha256", delivery.contentSha256)
+            // A JSON array, not a comma list: a package-relative file id may contain
+            // a comma, and the client prefetches the closure from this header.
+            .header("X-Sandbox-Module-Dependencies", JSON.stringify(delivery.dependencies))
+            .header("X-Sandbox-Pack", delivery.packName)
+            // The pack-relative file id: an entry is requested by specifier, and the
+            // client resolves the module's own relative imports against this.
+            .header("X-Sandbox-File-Id", delivery.fileId)
+            .header("X-Sandbox-Internal", delivery.internal ? "1" : "0")
+            .header("ETag", etag)
+            .header("Cache-Control", REVALIDATE_CACHE_CONTROL);
+        if (delivery.packVersion !== undefined) {
+            reply.header("X-Sandbox-Pack-Version", delivery.packVersion);
+        }
+        // The WASM call contract, on a public entry only: the client builds the
+        // facade it imports from this, and an internal file has none.
+        if (delivery.kind === "wasm" && delivery.wasm !== undefined) {
+            reply.header("X-Sandbox-Wasm-Contract", JSON.stringify(delivery.wasm));
+        }
+        // A host module's body is its generated facade; the client needs the id to
+        // rebuild the resolved module, and the registry supplies everything else.
+        if (delivery.kind === "host") {
+            reply.header("X-Sandbox-Host-Module", delivery.hostId);
+        }
+        if (req.headers["if-none-match"] === etag) {
+            return reply.status(304).send();
+        }
+        return reply
+            .status(200)
+            .send(delivery.kind === "wasm"
+            ? Buffer.from(delivery.bytes)
+            : delivery.source);
+    });
+};
+export default sandboxModulesRoutes;
+//# sourceMappingURL=sandbox-modules.js.map

package/dist/routes/sandbox-modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-modules.js","sourceRoot":"","sources":["../../src/routes/sandbox-modules.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,wBAAwB,GAAG,mBAAmB,CAAC;AAErD,MAAM,oBAAoB,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IAC7D,0EAA0E;IAC1E,2EAA2E;IAC3E,2EAA2E;IAC3E,0BAA0B;IAC1B,MAAM,SAAS,GAAG,sBAAsB,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG;QAClB,SAAS,EAAE;YACT,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB;YAChE,UAAU,EAAE,SAAS,CAAC,UAAU;SACjC;KACF,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC9E,MAAM,QAAQ,GAAI,GAAG,CAAC,MAA2B,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,oEAAoE;YACpE,0DAA0D;YAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC;QAC3C,KAAK;aACF,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC;aAC1C,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,aAAa,CAAC;YACnD,uEAAuE;YACvE,yEAAyE;YACzE,iDAAiD;aAChD,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,aAAa,CAAC;YACnD,yEAAyE;YACzE,mEAAmE;aAClE,MAAM,CACL,+BAA+B,EAC/B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CACtC;aACA,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAC5C,yEAAyE;YACzE,kEAAkE;aACjE,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC5C,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;aAC3D,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;aACpB,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/D,CAAC;QACD,wEAAwE;QACxE,8DAA8D;QAC9D,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5D,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,2EAA2E;QAC3E,0EAA0E;QAC1E,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,KAAK;aACT,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CACH,QAAQ,CAAC,IAAI,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC7B,CAAC,CAAC,QAAQ,CAAC,MAAM,CACpB,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/routes/sdk-v1.d.ts

@@ -0,0 +1,24 @@
+import type { FastifyPluginAsync } from "fastify";
+import { type ImplementedSdkV1HttpOperationId } from "@nodetool-ai/protocol/api-schemas/sdk-v1-operations.js";
+import { type HttpApiOptions } from "../http-api.js";
+import type { SdkV1ImplementationBoundary } from "../sdk/sdk-v1-handler-map.js";
+export type SdkV1RouteApiOptions = HttpApiOptions & {
+    readonly sdkV1Boundary: SdkV1ImplementationBoundary;
+};
+interface SdkV1RoutesOptions {
+    readonly apiOptions: SdkV1RouteApiOptions;
+}
+declare module "fastify" {
+    interface FastifyContextConfig {
+        sdkV1Operation?: {
+            readonly id: ImplementedSdkV1HttpOperationId;
+            readonly method: "GET" | "POST";
+            readonly path: string;
+        };
+        sdkV1NotFound?: true;
+    }
+}
+/** Registers every implemented SDK v1 HTTP declaration exactly once. */
+declare const sdkV1Routes: FastifyPluginAsync<SdkV1RoutesOptions>;
+export default sdkV1Routes;
+//# sourceMappingURL=sdk-v1.d.ts.map

package/dist/routes/sdk-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-v1.d.ts","sourceRoot":"","sources":["../../src/routes/sdk-v1.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,kBAAkB,EAGnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAEL,KAAK,+BAA+B,EACrC,MAAM,wDAAwD,CAAC;AAehE,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAQhF,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG;IAClD,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;CACrD,CAAC;AAEF,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;CAC3C;AAED,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,oBAAoB;QAC5B,cAAc,CAAC,EAAE;YACf,QAAQ,CAAC,EAAE,EAAE,+BAA+B,CAAC;YAC7C,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;YAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;SACvB,CAAC;QACF,aAAa,CAAC,EAAE,IAAI,CAAC;KACtB;CACF;AAoXD,wEAAwE;AACxE,QAAA,MAAM,WAAW,EAAE,kBAAkB,CAAC,kBAAkB,CAqGvD,CAAC;eAEa,WAAW"}

package/dist/routes/sdk-v1.js

@@ -0,0 +1,320 @@
+import { gzipSync } from "node:zlib";
+import { implementedSdkV1HttpOperations } from "@nodetool-ai/protocol/api-schemas/sdk-v1-operations.js";
+import { sdkNodeTypeInventoryInput } from "@nodetool-ai/protocol/api-schemas/nodes.js";
+import { sdkV1ModelCatalogQuery, sdkV1ModelDownloadCancelRequest, sdkV1ModelDownloadQuery, sdkV1ModelDownloadStartRequest } from "@nodetool-ai/protocol/api-schemas/sdk-models-v1.js";
+import { sdkV1PreflightRequest } from "@nodetool-ai/protocol/api-schemas/sdk-lifecycle-v1.js";
+import { sdkWorkflowSummariesInput, workflowInterfacesInput } from "@nodetool-ai/protocol/api-schemas/workflows.js";
+import { GZIP_THRESHOLD } from "../lib/compression.js";
+import { bridge } from "../lib/bridge.js";
+import { getWorkflowRuntimeEnvironment } from "../http-api.js";
+import { handleSdkV1TemporaryAssetUpload } from "../sdk/sdk-temporary-asset-upload-http-handler.js";
+import { normalizeSdkV1ServiceError, reportSdkV1InternalError, sdkV1HttpError } from "../sdk/sdk-v1-service-error.js";
+import { createLogger } from "@nodetool-ai/config";
+const log = createLogger("nodetool.websocket.sdk-v1");
+const SDK_V1_JSON_BODY_OPERATIONS = new Set([
+    "startModelDownload",
+    "cancelModelDownload",
+    "preflightWorkflow",
+    "getWorkflowInterfaces"
+]);
+function fastifyPath(path) {
+    return path.replaceAll(/\{([^}]+)\}/g, ":$1");
+}
+function acceptsGzip(request) {
+    const value = request.headers["accept-encoding"];
+    return (Array.isArray(value) ? value.join(", ") : (value ?? "")).includes("gzip");
+}
+function sendJson(request, reply, body, status = 200) {
+    const bytes = Buffer.from(JSON.stringify(body), "utf8");
+    reply.code(status).type("application/json");
+    if (bytes.length > GZIP_THRESHOLD && acceptsGzip(request)) {
+        const compressed = gzipSync(bytes);
+        reply.header("content-encoding", "gzip");
+        reply.header("content-length", String(compressed.length));
+        reply.send(compressed);
+        return;
+    }
+    reply.header("content-length", String(bytes.length));
+    reply.send(bytes);
+}
+function sendError(request, reply, status, code, message, retryable = false) {
+    sendJson(request, reply, { code, message, retryable }, status);
+}
+function sendServiceError(request, reply, error) {
+    const normalized = normalizeSdkV1ServiceError(error);
+    reportSdkV1InternalError(normalized, (cause) => {
+        log.error("SDK v1 service failed", cause instanceof Error ? cause : new Error(String(cause)));
+    });
+    const mapped = sdkV1HttpError(normalized);
+    sendJson(request, reply, mapped.body, mapped.status);
+}
+function userId(request) {
+    return request.userId ?? "1";
+}
+function queryRecord(request) {
+    return (request.query ?? {});
+}
+function createSdkV1RouteHandlers(apiOptions) {
+    const boundary = apiOptions.sdkV1Boundary;
+    return {
+        getNodeTypeInventory: async (request, reply) => {
+            const raw = queryRecord(request);
+            const input = {};
+            if (raw.cursor !== undefined) {
+                input.cursor = Number(raw.cursor);
+            }
+            if (raw.limit !== undefined) {
+                input.limit = Number(raw.limit);
+            }
+            const parsed = sdkNodeTypeInventoryInput.safeParse(input);
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "cursor must be >= 0 and limit 1..100");
+                return;
+            }
+            try {
+                const registry = apiOptions.registry ??
+                    (await getWorkflowRuntimeEnvironment(apiOptions)).registry;
+                sendJson(request, reply, await boundary.handlers.getNodeTypeInventory({
+                    request: parsed.data,
+                    registry,
+                    pythonBridgeReady: apiOptions.getPythonBridgeReady?.() ?? false
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        getCapabilities: async (request, reply) => {
+            try {
+                sendJson(request, reply, await boundary.handlers.getCapabilities(undefined));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        listModels: async (request, reply) => {
+            const parsed = sdkV1ModelCatalogQuery.safeParse(queryRecord(request));
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "Invalid model catalog query");
+                return;
+            }
+            try {
+                sendJson(request, reply, await boundary.handlers.listModels({
+                    userId: userId(request),
+                    query: parsed.data
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        listModelDownloads: async (request, reply) => {
+            const parsed = sdkV1ModelDownloadQuery.safeParse(queryRecord(request));
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "Invalid model download query");
+                return;
+            }
+            try {
+                sendJson(request, reply, await boundary.handlers.listModelDownloads({
+                    userId: userId(request),
+                    query: parsed.data
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        startModelDownload: async (request, reply) => {
+            const parsed = sdkV1ModelDownloadStartRequest.safeParse(request.body);
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "Invalid model download request");
+                return;
+            }
+            try {
+                sendJson(request, reply, await boundary.handlers.startModelDownload({
+                    userId: userId(request),
+                    request: parsed.data
+                }), 202);
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        cancelModelDownload: async (request, reply) => {
+            const parsed = sdkV1ModelDownloadCancelRequest.safeParse(request.body);
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "Invalid model download cancellation request");
+                return;
+            }
+            try {
+                sendJson(request, reply, await boundary.handlers.cancelModelDownload({
+                    userId: userId(request),
+                    operationId: parsed.data.operation_id
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        preflightWorkflow: async (request, reply) => {
+            const parsed = sdkV1PreflightRequest.safeParse(request.body);
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_REQUEST", "Invalid preflight request");
+                return;
+            }
+            try {
+                sendJson(request, reply, await boundary.handlers.preflightWorkflow({
+                    request: parsed.data,
+                    principal: request.userId ? { userId: request.userId } : null
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        listWorkflowSummaries: async (request, reply) => {
+            const raw = queryRecord(request);
+            const input = {};
+            if (raw.limit !== undefined) {
+                input.limit = Number(raw.limit);
+            }
+            if (typeof raw.cursor === "string") {
+                input.cursor = raw.cursor;
+            }
+            const parsed = sdkWorkflowSummariesInput.safeParse(input);
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "Invalid workflow summary query");
+                return;
+            }
+            try {
+                sendJson(request, reply, await boundary.handlers.listWorkflowSummaries({
+                    userId: userId(request),
+                    request: parsed.data,
+                    registryRevision: Number.isSafeInteger(apiOptions.registry?.revision)
+                        ? apiOptions.registry.revision
+                        : null
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        getWorkflowInterfaces: async (request, reply) => {
+            const parsed = workflowInterfacesInput.safeParse(request.body);
+            if (!parsed.success) {
+                sendError(request, reply, 400, "INVALID_INPUT", "Expected 1 to 100 unique workflow ids");
+                return;
+            }
+            try {
+                const registry = apiOptions.registry ??
+                    (await getWorkflowRuntimeEnvironment(apiOptions)).registry;
+                sendJson(request, reply, await boundary.handlers.getWorkflowInterfaces({
+                    userId: userId(request),
+                    request: parsed.data,
+                    registry
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        getWorkflowInterface: async (request, reply) => {
+            const { id } = request.params;
+            const { version } = queryRecord(request);
+            if (version !== "1") {
+                sendError(request, reply, 400, "UNSUPPORTED_WORKFLOW_INTERFACE_VERSION", "Workflow interface version 1 is required");
+                return;
+            }
+            try {
+                const registry = apiOptions.registry ??
+                    (await getWorkflowRuntimeEnvironment(apiOptions)).registry;
+                sendJson(request, reply, await boundary.handlers.getWorkflowInterface({
+                    userId: userId(request),
+                    workflowId: id,
+                    registry
+                }));
+            }
+            catch (error) {
+                sendServiceError(request, reply, error);
+            }
+        },
+        uploadTemporaryAsset: async (request, reply) => {
+            await bridge(request, reply, (webRequest) => handleSdkV1TemporaryAssetUpload(webRequest, { boundary }), apiOptions.userIdHeader ?? "x-user-id");
+        }
+    };
+}
+/** Registers every implemented SDK v1 HTTP declaration exactly once. */
+const sdkV1Routes = async (app, options) => {
+    const handlers = createSdkV1RouteHandlers(options.apiOptions);
+    app.setErrorHandler((error, request, reply) => {
+        const statusCode = error !== null &&
+            typeof error === "object" &&
+            "statusCode" in error &&
+            typeof error.statusCode === "number"
+            ? error.statusCode
+            : 500;
+        if (statusCode === 415) {
+            sendError(request, reply, 415, "UNSUPPORTED_MEDIA_TYPE", "Content-Type must be application/json");
+            return;
+        }
+        if (statusCode === 400) {
+            sendError(request, reply, 400, "INVALID_REQUEST", "Invalid JSON body");
+            return;
+        }
+        log.error("SDK v1 route failed", error);
+        sendError(request, reply, 500, "INTERNAL_ERROR", "Internal server error");
+    });
+    app.addHook("preValidation", async (request, reply) => {
+        const operation = request.routeOptions.config.sdkV1Operation;
+        if (!operation || !SDK_V1_JSON_BODY_OPERATIONS.has(operation.id)) {
+            return;
+        }
+        const contentType = request.headers["content-type"];
+        if (typeof contentType !== "string" ||
+            !contentType.toLowerCase().startsWith("application/json")) {
+            sendError(request, reply, 415, "UNSUPPORTED_MEDIA_TYPE", "Content-Type must be application/json");
+            return;
+        }
+        if (Buffer.isBuffer(request.body) ||
+            request.body instanceof Uint8Array ||
+            typeof request.body === "string") {
+            try {
+                const text = typeof request.body === "string"
+                    ? request.body
+                    : Buffer.from(request.body).toString("utf8");
+                request.body = JSON.parse(text);
+            }
+            catch {
+                sendError(request, reply, 400, "INVALID_REQUEST", "Invalid JSON body");
+            }
+        }
+    });
+    for (const operation of implementedSdkV1HttpOperations) {
+        app.route({
+            method: operation.method,
+            url: fastifyPath(operation.path),
+            exposeHeadRoute: false,
+            config: {
+                sdkV1Operation: {
+                    id: operation.id,
+                    method: operation.method,
+                    path: operation.path
+                }
+            },
+            handler: handlers[operation.id]
+        });
+    }
+    const notFoundHandler = async (request, reply) => {
+        sendError(request, reply, 404, "NOT_FOUND", "SDK endpoint not found");
+    };
+    for (const path of ["/api/sdk/v1", "/api/sdk/v1/*"]) {
+        app.route({
+            method: ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"],
+            url: fastifyPath(path),
+            config: { sdkV1NotFound: true },
+            handler: notFoundHandler
+        });
+    }
+};
+export default sdkV1Routes;
+//# sourceMappingURL=sdk-v1.js.map

package/dist/routes/sdk-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-v1.js","sourceRoot":"","sources":["../../src/routes/sdk-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAMrC,OAAO,EACL,8BAA8B,EAE/B,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4CAA4C,CAAC;AACvF,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,uBAAuB,EACvB,8BAA8B,EAC/B,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uDAAuD,CAAC;AAC9F,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,6BAA6B,EAE9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAEpG,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,cAAc,EACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAqBnD,MAAM,GAAG,GAAG,YAAY,CAAC,2BAA2B,CAAC,CAAC;AAEtD,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAkC;IAC3E,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;CACxB,CAAC,CAAC;AAOH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CACvE,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,OAAuB,EACvB,KAAmB,EACnB,IAAa,EACb,MAAM,GAAG,GAAG;IAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,KAAK,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;QACzC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAChB,OAAuB,EACvB,KAAmB,EACnB,MAAc,EACd,IAAY,EACZ,OAAe,EACf,SAAS,GAAG,KAAK;IAEjB,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAuB,EACvB,KAAmB,EACnB,KAAc;IAEd,MAAM,UAAU,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACrD,wBAAwB,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7C,GAAG,CAAC,KAAK,CACP,uBAAuB,EACvB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,OAAuB;IACrC,OAAO,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAgC;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC,aAAa,CAAC;IAE1C,OAAO;QACL,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,GAAwC,EAAE,CAAC;YACtD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC7B,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,eAAe,EACf,sCAAsC,CACvC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GACZ,UAAU,CAAC,QAAQ;oBACnB,CAAC,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC7D,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC;oBAC3C,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,QAAQ;oBACR,iBAAiB,EAAE,UAAU,CAAC,oBAAoB,EAAE,EAAE,IAAI,KAAK;iBAChE,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACxC,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,CACnD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,eAAe,EACf,6BAA6B,CAC9B,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACjC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,KAAK,EAAE,MAAM,CAAC,IAAI;iBACnB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,eAAe,EACf,8BAA8B,CAC/B,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC;oBACzC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,KAAK,EAAE,MAAM,CAAC,IAAI;iBACnB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,8BAA8B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,eAAe,EACf,gCAAgC,CACjC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC;oBACzC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,OAAO,EAAE,MAAM,CAAC,IAAI;iBACrB,CAAC,EACF,GAAG,CACJ,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,eAAe,EACf,6CAA6C,CAC9C,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC;oBAC1C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;iBACtC,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,iBAAiB,EACjB,2BAA2B,CAC5B,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC;oBACxC,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;iBAC9D,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,KAAK,GAAwC,EAAE,CAAC;YACtD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACnC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC5B,CAAC;YACD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,gCAAgC,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAC5C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,gBAAgB,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC;wBACnE,CAAC,CAAC,UAAU,CAAC,QAAS,CAAC,QAAQ;wBAC/B,CAAC,CAAC,IAAI;iBACT,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,eAAe,EACf,uCAAuC,CACxC,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GACZ,UAAU,CAAC,QAAQ;oBACnB,CAAC,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC7D,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,qBAAqB,CAAC;oBAC5C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,OAAO,EAAE,MAAM,CAAC,IAAI;oBACpB,QAAQ;iBACT,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC7C,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,MAAiC,CAAC;YACzD,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,wCAAwC,EACxC,0CAA0C,CAC3C,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GACZ,UAAU,CAAC,QAAQ;oBACnB,CAAC,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAC7D,QAAQ,CACN,OAAO,EACP,KAAK,EACL,MAAM,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC;oBAC3C,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;oBACvB,UAAU,EAAE,EAAE;oBACd,QAAQ;iBACT,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,oBAAoB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC7C,MAAM,MAAM,CACV,OAAO,EACP,KAAK,EACL,CAAC,UAAU,EAAE,EAAE,CACb,+BAA+B,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAC3D,UAAU,CAAC,YAAY,IAAI,WAAW,CACvC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,WAAW,GAA2C,KAAK,EAC/D,GAAG,EACH,OAAO,EACP,EAAE;IACF,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAE9D,GAAG,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,UAAU,GACd,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,QAAQ;YACzB,YAAY,IAAI,KAAK;YACrB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YAClC,CAAC,CAAC,KAAK,CAAC,UAAU;YAClB,CAAC,CAAC,GAAG,CAAC;QACV,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,wBAAwB,EACxB,uCAAuC,CACxC,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;YACvB,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QACxC,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,gBAAgB,EAChB,uBAAuB,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC;QAC7D,IAAI,CAAC,SAAS,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;YACjE,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACpD,IACE,OAAO,WAAW,KAAK,QAAQ;YAC/B,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC,EACzD,CAAC;YACD,SAAS,CACP,OAAO,EACP,KAAK,EACL,GAAG,EACH,wBAAwB,EACxB,uCAAuC,CACxC,CAAC;YACF,OAAO;QACT,CAAC;QACD,IACE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,OAAO,CAAC,IAAI,YAAY,UAAU;YAClC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAChC,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GACR,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;oBAC9B,CAAC,CAAC,OAAO,CAAC,IAAI;oBACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,SAAS,IAAI,8BAA8B,EAAE,CAAC;QACvD,GAAG,CAAC,KAAK,CAAC;YACR,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC;YAChC,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE;gBACN,cAAc,EAAE;oBACd,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;iBACrB;aACF;YACD,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GAAwB,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACpE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,wBAAwB,CAAC,CAAC;IACxE,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC;YACR,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC;YAC5D,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC;YACtB,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;YAC/B,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/routes/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/routes/storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,aAAa,EAAE,kBAAkB,CAAC,YAAY,CASnD,CAAC;AAEF,eAAe,aAAa,CAAC"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/routes/storage.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,aAAa,EAAE,kBAAkB,CAAC,YAAY,CASnD,CAAC;eAEa,aAAa"}

package/dist/routes/storyboards.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Storyboard zip download — `GET /api/storyboards/:id/export-zip`.
+ *
+ * The web app reads and writes boards over `/trpc/storyboards.*`; this is the
+ * one non-tRPC door, because the response is a binary archive rather than
+ * JSON. It packs the board as Markdown plus its stills and clips
+ * (`lib/storyboard-export.ts`).
+ */
+import type { FastifyPluginAsync } from "fastify";
+import { type HttpApiOptions } from "../http-api.js";
+interface RouteOptions {
+    apiOptions: HttpApiOptions;
+}
+declare const storyboardsRoutes: FastifyPluginAsync<RouteOptions>;
+export default storyboardsRoutes;
+//# sourceMappingURL=storyboards.d.ts.map

package/dist/routes/storyboards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storyboards.d.ts","sourceRoot":"","sources":["../../src/routes/storyboards.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAIlD,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAQhE,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AA6BD,QAAA,MAAM,iBAAiB,EAAE,kBAAkB,CAAC,YAAY,CA+DvD,CAAC;eAEa,iBAAiB"}