@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.1

package/dist/routes/fal-webhook.js

@@ -0,0 +1,379 @@
+/**
+ * Authenticated fal queue webhook ingress.
+ *
+ * The route deliberately stops at the durable inbox boundary. A generation
+ * finalizer consumes the accepted delivery later, so this handler never
+ * downloads provider media or emits completion notifications.
+ */
+import { createHash, createPublicKey, verify as verifySignature } from "node:crypto";
+import { GenerationWebhookDelivery, GenerationAttempt } from "@nodetool-ai/models";
+export const FAL_WEBHOOK_PATH = "/api/providers/fal/webhook/:token";
+export const FAL_WEBHOOK_JWKS_URL = "https://rest.fal.ai/.well-known/jwks.json";
+export const FAL_WEBHOOK_TIMESTAMP_WINDOW_SECONDS = 300;
+export const FAL_WEBHOOK_JWKS_CACHE_TTL_MS = 24 * 60 * 60 * 1000;
+export const FAL_WEBHOOK_MAX_BODY_BYTES = 10 * 1024 * 1024;
+const HEADER_REQUEST_ID = "x-fal-webhook-request-id";
+const HEADER_USER_ID = "x-fal-webhook-user-id";
+const HEADER_TIMESTAMP = "x-fal-webhook-timestamp";
+const HEADER_SIGNATURE = "x-fal-webhook-signature";
+class FalWebhookKeyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "FalWebhookKeyError";
+    }
+}
+function parseHeader(headers, name) {
+    const headerName = Object.keys(headers).find((key) => key.toLowerCase() === name);
+    const value = headerName ? headers[headerName] : undefined;
+    if (typeof value !== "string" || value.length === 0)
+        return null;
+    // Header values are part of the signed message. Reject whitespace and
+    // control characters instead of silently normalising a signed value.
+    if (!/^[\x21-\x7e]+$/u.test(value)) {
+        return null;
+    }
+    return value;
+}
+function parseFalHeaders(headers) {
+    const requestId = parseHeader(headers, HEADER_REQUEST_ID);
+    const userId = parseHeader(headers, HEADER_USER_ID);
+    const timestamp = parseHeader(headers, HEADER_TIMESTAMP);
+    const signature = parseHeader(headers, HEADER_SIGNATURE);
+    if (!requestId || !userId || !timestamp || !signature) {
+        return { ok: false, retryable: false, reason: "missing_header" };
+    }
+    if (requestId.length > 512 ||
+        userId.length > 512 ||
+        !/^\d{1,12}$/u.test(timestamp) ||
+        !/^[0-9a-fA-F]{128}$/u.test(signature)) {
+        return { ok: false, retryable: false, reason: "invalid_header" };
+    }
+    return { requestId, userId, timestamp, signature };
+}
+function decodeBase64Url(value) {
+    if (!/^[A-Za-z0-9_-]+$/u.test(value))
+        return null;
+    try {
+        const decoded = Buffer.from(value, "base64url");
+        return decoded.length === 32 ? decoded : null;
+    }
+    catch {
+        return null;
+    }
+}
+function isFalJwk(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const key = value;
+    return (key.kty === "OKP" &&
+        key.crv === "Ed25519" &&
+        typeof key.x === "string" &&
+        decodeBase64Url(key.x) !== null);
+}
+async function fetchFalJwks() {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5_000);
+    try {
+        const response = await fetch(FAL_WEBHOOK_JWKS_URL, {
+            signal: controller.signal,
+            headers: { accept: "application/json" }
+        });
+        if (!response.ok) {
+            throw new FalWebhookKeyError(`fal JWKS returned ${response.status}`);
+        }
+        const parsed = await response.json();
+        if (typeof parsed !== "object" || parsed === null) {
+            throw new FalWebhookKeyError("fal JWKS was not an object");
+        }
+        const keys = parsed.keys;
+        if (!Array.isArray(keys)) {
+            throw new FalWebhookKeyError("fal JWKS did not contain keys");
+        }
+        return keys.filter(isFalJwk);
+    }
+    catch (error) {
+        if (error instanceof FalWebhookKeyError)
+            throw error;
+        throw new FalWebhookKeyError("fal JWKS fetch failed");
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+/**
+ * fal Ed25519 verifier. Key refreshes are coalesced so a burst of callbacks
+ * cannot turn a key rotation or cold start into a request storm.
+ */
+export class FalWebhookVerifier {
+    fetchJwks;
+    now;
+    cacheTtlMs;
+    cachedKeys = null;
+    cacheExpiresAt = 0;
+    refreshPromise = null;
+    constructor(options = {}) {
+        this.fetchJwks = options.fetchJwks ?? fetchFalJwks;
+        this.now = options.now ?? Date.now;
+        this.cacheTtlMs = Math.min(options.cacheTtlMs ?? FAL_WEBHOOK_JWKS_CACHE_TTL_MS, FAL_WEBHOOK_JWKS_CACHE_TTL_MS);
+    }
+    async refreshKeys() {
+        if (this.refreshPromise)
+            return this.refreshPromise;
+        this.refreshPromise = this.fetchJwks()
+            .then((keys) => {
+            this.cachedKeys = keys;
+            this.cacheExpiresAt = this.now() + this.cacheTtlMs;
+            return keys;
+        })
+            .finally(() => {
+            this.refreshPromise = null;
+        });
+        return this.refreshPromise;
+    }
+    async keys() {
+        if (this.cachedKeys && this.now() < this.cacheExpiresAt) {
+            return this.cachedKeys;
+        }
+        return this.refreshKeys();
+    }
+    async verify(headers, body) {
+        const parsed = parseFalHeaders(headers);
+        if ("ok" in parsed)
+            return parsed;
+        const timestamp = Number(parsed.timestamp);
+        const nowSeconds = Math.floor(this.now() / 1000);
+        if (!Number.isSafeInteger(timestamp)) {
+            return { ok: false, retryable: false, reason: "invalid_timestamp" };
+        }
+        if (Math.abs(nowSeconds - timestamp) > FAL_WEBHOOK_TIMESTAMP_WINDOW_SECONDS) {
+            return { ok: false, retryable: false, reason: "stale_timestamp" };
+        }
+        const bodySha256 = createHash("sha256").update(body).digest("hex");
+        const message = Buffer.from(`${parsed.requestId}\n${parsed.userId}\n${parsed.timestamp}\n${bodySha256}`, "utf8");
+        const signature = Buffer.from(parsed.signature, "hex");
+        let keys;
+        try {
+            keys = await this.keys();
+        }
+        catch {
+            return { ok: false, retryable: true, reason: "jwks_unavailable" };
+        }
+        const matches = (candidateKeys) => {
+            for (const jwk of candidateKeys) {
+                try {
+                    // Keep the verifier input to the required Ed25519 JWK members. The
+                    // local validation type intentionally does not claim Node's broad
+                    // JsonWebKey index signature.
+                    const key = {
+                        kty: jwk.kty,
+                        crv: jwk.crv,
+                        x: jwk.x
+                    };
+                    const publicKey = createPublicKey({ key, format: "jwk" });
+                    if (verifySignature(null, message, publicKey, signature))
+                        return true;
+                }
+                catch {
+                    // Invalid keys are ignored. A malformed JWKS must not make an
+                    // attacker-controlled callback pass verification.
+                }
+            }
+            return false;
+        };
+        if (!matches(keys)) {
+            // A signed callback can arrive immediately after fal rotates keys. One
+            // bounded refresh handles that case while preventing retry storms.
+            try {
+                keys = await this.refreshKeys();
+            }
+            catch {
+                return { ok: false, retryable: true, reason: "jwks_unavailable" };
+            }
+            if (!matches(keys)) {
+                return { ok: false, retryable: false, reason: "invalid_signature" };
+            }
+        }
+        return { ok: true, headers: parsed, bodySha256 };
+    }
+}
+/** Durable adapter for the generation-attempt and webhook-delivery tables. */
+export class DrizzleFalWebhookInbox {
+    async findAttempt(token) {
+        const row = await GenerationAttempt.findByCallbackToken("fal_ai", token);
+        if (!row)
+            return null;
+        const providerRequestId = typeof row.provider_request_id === "string"
+            ? row.provider_request_id
+            : undefined;
+        const providerAccountRef = typeof row.provider_account_ref === "string"
+            ? row.provider_account_ref
+            : undefined;
+        const attempt = {
+            attemptId: row.id,
+            generationId: row.generation_id,
+            providerRequestId,
+            providerAccountRef
+        };
+        return attempt;
+    }
+    async insertIfAbsent(delivery) {
+        // Older attempts may not have an account reference. Scope their fallback
+        // to the generation rather than allowing unrelated requests to collide.
+        const accountRef = delivery.attempt.providerAccountRef ??
+            `generation:${delivery.attempt.generationId}`;
+        const result = await GenerationWebhookDelivery.ingest({
+            provider: "fal_ai",
+            provider_account_ref: accountRef,
+            provider_request_id: delivery.requestId,
+            payload_hash: delivery.bodySha256,
+            raw_payload: Buffer.from(delivery.rawBody).toString("utf8"),
+            signature: delivery.headersSignature ?? null,
+            generation_id: delivery.attempt.generationId,
+            attempt_id: delivery.attempt.attemptId ?? null,
+            observation: {
+                gateway_request_id: delivery.gatewayRequestId,
+                user_id: delivery.userId,
+                timestamp: delivery.timestamp,
+                status: delivery.status,
+                payload: delivery.payload,
+                payload_error: delivery.payloadError,
+                error: delivery.error
+            }
+        });
+        return result.created;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nonEmptyString(value) {
+    return typeof value === "string" && value.length > 0 ? value : null;
+}
+function requestHeaders(req) {
+    return req.headers;
+}
+export function createFalWebhookRoute(options = {}) {
+    const maxBodyBytes = options.maxBodyBytes ?? FAL_WEBHOOK_MAX_BODY_BYTES;
+    const verifier = options.verifier ?? new FalWebhookVerifier();
+    return async (app) => {
+        // This parser is encapsulated by Fastify. Other routes retain their
+        // existing parser and never see a reserialised body.
+        app.removeAllContentTypeParsers();
+        app.addContentTypeParser("*", { parseAs: "buffer", bodyLimit: maxBodyBytes }, (_req, body, done) => done(null, body));
+        app.post(FAL_WEBHOOK_PATH, {
+            bodyLimit: maxBodyBytes,
+            config: { rateLimit: { max: 120, timeWindow: 60_000 } },
+            schema: {
+                // The body is intentionally a raw Buffer. JSON schema validation is
+                // performed after signature verification below, because parsing or
+                // reserialising it first would invalidate fal's signature.
+                body: {},
+                params: {
+                    type: "object",
+                    required: ["token"],
+                    properties: {
+                        token: { type: "string", minLength: 1, maxLength: 512 }
+                    }
+                },
+                response: {
+                    200: {
+                        type: "object",
+                        required: ["status", "duplicate"],
+                        properties: {
+                            status: { type: "string", const: "accepted" },
+                            duplicate: { type: "boolean" }
+                        }
+                    }
+                }
+            }
+        }, async (req, reply) => {
+            const body = Buffer.isBuffer(req.body)
+                ? req.body
+                : req.body?.raw;
+            if (!body)
+                return reply.status(400).send({ error: "Missing body" });
+            const verification = await verifier.verify(requestHeaders(req), body);
+            if (!verification.ok) {
+                return reply
+                    .status(verification.retryable ? 503 : 400)
+                    .send({ error: verification.reason });
+            }
+            let decoded;
+            try {
+                decoded = JSON.parse(body.toString("utf8"));
+            }
+            catch {
+                return reply.status(400).send({ error: "Invalid JSON body" });
+            }
+            if (!isRecord(decoded)) {
+                return reply
+                    .status(400)
+                    .send({ error: "Webhook body must be an object" });
+            }
+            const requestId = nonEmptyString(decoded.request_id);
+            const gatewayRequestId = nonEmptyString(decoded.gateway_request_id);
+            const status = decoded.status;
+            if (!requestId ||
+                (requestId !== verification.headers.requestId &&
+                    gatewayRequestId !== verification.headers.requestId)) {
+                return reply.status(400).send({ error: "Request ID mismatch" });
+            }
+            if (status !== "OK" && status !== "ERROR") {
+                return reply.status(400).send({ error: "Invalid webhook status" });
+            }
+            const token = req.params.token;
+            if (!options.inbox) {
+                return reply.status(503).send({ error: "Inbox unavailable" });
+            }
+            let attempt;
+            try {
+                attempt = await options.inbox.findAttempt(token);
+            }
+            catch {
+                return reply.status(503).send({ error: "Inbox unavailable" });
+            }
+            if (!attempt)
+                return reply.status(404).send({ error: "Unknown webhook token" });
+            if (attempt.providerUserId &&
+                attempt.providerUserId !== verification.headers.userId) {
+                return reply.status(400).send({ error: "Webhook user mismatch" });
+            }
+            if (attempt.providerRequestId &&
+                attempt.providerRequestId !== requestId) {
+                return reply.status(400).send({ error: "Provider request mismatch" });
+            }
+            const delivery = {
+                token,
+                attempt,
+                requestId,
+                gatewayRequestId,
+                userId: verification.headers.userId,
+                timestamp: verification.headers.timestamp,
+                status,
+                payload: decoded.payload ?? null,
+                payloadError: decoded.payload_error ?? null,
+                // fal's ERROR callbacks commonly put the useful diagnostic in
+                // payload_error. Preserve the structured field and expose the same
+                // normalized value to consumers that only read `error`.
+                error: decoded.error ?? decoded.payload_error ?? null,
+                rawBody: Buffer.from(body),
+                bodySha256: verification.bodySha256,
+                headersSignature: verification.headers.signature
+            };
+            let created;
+            try {
+                created = await options.inbox.insertIfAbsent(delivery);
+            }
+            catch {
+                return reply.status(503).send({ error: "Inbox unavailable" });
+            }
+            return reply.send({ status: "accepted", duplicate: !created });
+        });
+    };
+}
+/** Default registration keeps the callback surface present during cutover. */
+export const falWebhookRoute = createFalWebhookRoute({
+    inbox: new DrizzleFalWebhookInbox()
+});
+export default falWebhookRoute;
+//# sourceMappingURL=fal-webhook.js.map

package/dist/routes/fal-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fal-webhook.js","sourceRoot":"","sources":["../../src/routes/fal-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,UAAU,EACV,eAAe,EACf,MAAM,IAAI,eAAe,EAC1B,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,yBAAyB,EACzB,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,2CAA2C,CAAC;AAChF,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,CAAC;AACxD,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3D,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AACrD,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AACnD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AA0CnD,MAAM,kBAAmB,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,SAAS,WAAW,CAClB,OAAsD,EACtD,IAAY;IAEZ,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CACpC,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,sEAAsE;IACtE,qEAAqE;IACrE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CACtB,OAAsD;IAEtD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACnE,CAAC;IACD,IACE,SAAS,CAAC,MAAM,GAAG,GAAG;QACtB,MAAM,CAAC,MAAM,GAAG,GAAG;QACnB,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EACtC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QAChD,OAAO,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,CACL,GAAG,CAAC,GAAG,KAAK,KAAK;QACjB,GAAG,CAAC,GAAG,KAAK,SAAS;QACrB,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ;QACzB,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAChC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,EAAE;YACjD,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,kBAAkB,CAAC,4BAA4B,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAI,MAAkC,CAAC,IAAI,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAC;QACrD,MAAM,IAAI,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACxD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IACZ,SAAS,CAA0C;IACnD,GAAG,CAAe;IAClB,UAAU,CAAS;IAC5B,UAAU,GAAoC,IAAI,CAAC;IACnD,cAAc,GAAG,CAAC,CAAC;IACnB,cAAc,GAA6C,IAAI,CAAC;IAExE,YAAY,OAAO,GAA8B,EAAE;QACjD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;QACnD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CACxB,OAAO,CAAC,UAAU,IAAI,6BAA6B,EACnD,6BAA6B,CAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC;QACpD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE;aACnC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC,CAAC,CAAC;QACL,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,IAAI;QAChB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,OAAsD,EACtD,IAAgB;QAEhB,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAElC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QACtE,CAAC;QACD,IACE,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,oCAAoC,EACvE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,GAAG,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,EAC3E,MAAM,CACP,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAEvD,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,aAAuC,EAAW,EAAE;YACnE,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;gBAChC,IAAI,CAAC;oBACH,mEAAmE;oBACnE,kEAAkE;oBAClE,8BAA8B;oBAC9B,MAAM,GAAG,GAAe;wBACtB,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,CAAC,EAAE,GAAG,CAAC,CAAC;qBACT,CAAC;oBACF,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC1D,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC;wBAAE,OAAO,IAAI,CAAC;gBACxE,CAAC;gBAAC,MAAM,CAAC;oBACP,8DAA8D;oBAC9D,kDAAkD;gBACpD,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,CAAC;gBACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACnD,CAAC;CACF;AAkCD,8EAA8E;AAC9E,MAAM,OAAO,sBAAsB;IACjC,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,iBAAiB,GACrB,OAAO,GAAG,CAAC,mBAAmB,KAAK,QAAQ;YACzC,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACzB,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,kBAAkB,GACtB,OAAO,GAAG,CAAC,oBAAoB,KAAK,QAAQ;YAC1C,CAAC,CAAC,GAAG,CAAC,oBAAoB;YAC1B,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,OAAO,GAAsB;YACjC,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,iBAAiB;YACjB,kBAAkB;SACnB,CAAC;QACF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAA4B;QAC/C,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,UAAU,GACd,QAAQ,CAAC,OAAO,CAAC,kBAAkB;YACnC,cAAc,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC;YACpD,QAAQ,EAAE,QAAQ;YAClB,oBAAoB,EAAE,UAAU;YAChC,mBAAmB,EAAE,QAAQ,CAAC,SAAS;YACvC,YAAY,EAAE,QAAQ,CAAC,UAAU;YACjC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3D,SAAS,EAAE,QAAQ,CAAC,gBAAgB,IAAI,IAAI;YAC5C,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY;YAC5C,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI;YAC9C,WAAW,EAAE;gBACX,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB;gBAC7C,OAAO,EAAE,QAAQ,CAAC,MAAM;gBACxB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,aAAa,EAAE,QAAQ,CAAC,YAAY;gBACpC,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB;SACF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAaD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CACrB,GAAmB;IAEnB,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAO,GAA2B,EAAE;IAEpC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,0BAA0B,CAAC;IACxE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,kBAAkB,EAAE,CAAC;IAE9D,OAAO,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,oEAAoE;QACpE,qDAAqD;QACrD,GAAG,CAAC,2BAA2B,EAAE,CAAC;QAClC,GAAG,CAAC,oBAAoB,CACtB,GAAG,EACH,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,EAC9C,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CACvC,CAAC;QAEF,GAAG,CAAC,IAAI,CACN,gBAAgB,EAChB;YACE,SAAS,EAAE,YAAY;YACvB,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE;YACvD,MAAM,EAAE;gBACN,oEAAoE;gBACpE,mEAAmE;gBACnE,2DAA2D;gBAC3D,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,CAAC,OAAO,CAAC;oBACnB,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;qBACxD;iBACF;gBACD,QAAQ,EAAE;oBACR,GAAG,EAAE;wBACH,IAAI,EAAE,QAAQ;wBACd,QAAQ,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC;wBACjC,UAAU,EAAE;4BACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;4BAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;yBAC/B;qBACF;iBACF;aACF;SACF,EACD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBACpC,CAAC,CAAC,GAAG,CAAC,IAAI;gBACV,CAAC,CAAE,GAAG,CAAC,IAAmC,EAAE,GAAG,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAEpE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACtE,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,KAAK;qBACT,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;qBAC1C,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;YAED,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK;qBACT,MAAM,CAAC,GAAG,CAAC;qBACX,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC9B,IACE,CAAC,SAAS;gBACV,CAAC,SAAS,KAAK,YAAY,CAAC,OAAO,CAAC,SAAS;oBAC3C,gBAAgB,KAAK,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EACtD,CAAC;gBACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,OAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,OAAO;gBACV,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACpE,IACE,OAAO,CAAC,cAAc;gBACtB,OAAO,CAAC,cAAc,KAAK,YAAY,CAAC,OAAO,CAAC,MAAM,EACtD,CAAC;gBACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,IACE,OAAO,CAAC,iBAAiB;gBACzB,OAAO,CAAC,iBAAiB,KAAK,SAAS,EACvC,CAAC;gBACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,QAAQ,GAAuB;gBACnC,KAAK;gBACL,OAAO;gBACP,SAAS;gBACT,gBAAgB;gBAChB,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM;gBACnC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS;gBACzC,MAAM;gBACN,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;gBAChC,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI;gBAC3C,8DAA8D;gBAC9D,mEAAmE;gBACnE,wDAAwD;gBACxD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;gBACrD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1B,UAAU,EAAE,YAAY,CAAC,UAAU;gBACnC,gBAAgB,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS;aACjD,CAAC;YACF,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,qBAAqB,CAAC;IACnD,KAAK,EAAE,IAAI,sBAAsB,EAAE;CACpC,CAAC,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/dist/routes/files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,WAAW,EAAE,kBAAkB,CAAC,YAAY,CAMjD,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,WAAW,EAAE,kBAAkB,CAAC,YAAY,CAOjD,CAAC;eAEa,WAAW"}

package/dist/routes/files.js

@@ -1,9 +1,10 @@
 import { bridge } from "../lib/bridge.js";
 import { handleFileRequest } from "../file-api.js";
 const filesRoutes = async (app, _opts) => {
-    // Register all methods so unsupported verbs reach the handler and get the
-    // explicit 405 response instead of Fastify's default 404.
-    app.all("/api/files/download", async (req, reply) => {
+    // Stream a local file by absolute path (previews for `file://` URIs). GET/HEAD
+    // with Range support; the handler enforces the production guard and path
+    // denylist.
+    app.all("/api/files/local", async (req, reply) => {
         await bridge(req, reply, (request) => handleFileRequest(request));
     });
 };

package/dist/routes/files.js.map

@@ -1 +1 @@
-{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMnD,MAAM,WAAW,GAAqC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IACzE,0EAA0E;IAC1E,0DAA0D;IAC1D,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/routes/files.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMnD,MAAM,WAAW,GAAqC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IACzE,+EAA+E;IAC/E,yEAAyE;IACzE,YAAY;IACZ,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/routes/health.d.ts

@@ -1,4 +1,5 @@
 import type { FastifyPluginAsync } from "fastify";
+export declare function getVersion(): string;
 declare const healthRoute: FastifyPluginAsync;
 export default healthRoute;
 //# sourceMappingURL=health.d.ts.map

package/dist/routes/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAKlD,QAAA,MAAM,WAAW,EAAE,kBAwClB,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAWlD,wBAAgB,UAAU,IAAI,MAAM,CAWnC;AAED,QAAA,MAAM,WAAW,EAAE,kBA2DlB,CAAC;eAEa,WAAW"}

package/dist/routes/health.js

@@ -1,26 +1,49 @@
-import { getRawDb } from "@nodetool-ai/models";
+import { readFileSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { pingDb } from "@nodetool-ai/models";
+import { chatTurnRegistry } from "../chat-turn-registry.js";
+import { isDraining } from "../drain.js";
+import { jobRunRegistry } from "../job-run-registry.js";
 const serverStartTime = Date.now();
+export function getVersion() {
+    try {
+        const packageJsonPath = resolve(dirname(fileURLToPath(import.meta.url)), "../../package.json");
+        const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf-8"));
+        return packageJson.version || "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
 const healthRoute = async (app) => {
     /**
      * GET /health — detailed health check.
-     * Returns 200 when all services are healthy, 503 when degraded.
+     * Returns 200 when all services are healthy, 503 when degraded or draining.
      * No authentication required.
+     *
+     * `turns` and `jobs` are always reported: a rolling deploy drains one machine
+     * and then polls this endpoint until both reach 0 before replacing it, and a
+     * count that only appeared while draining could not be told from a payload
+     * this build does not produce. The 503 is what makes Fly's health check fail
+     * and stops new clients being routed here.
      */
     app.get("/health", async (_req, reply) => {
         let dbStatus = "ok";
         try {
-            const raw = getRawDb();
-            // Fast integrity check — just verifies the connection is alive
-            raw.pragma("quick_check(1)");
+            await pingDb();
         }
         catch {
             dbStatus = "error";
         }
-        const allOk = dbStatus === "ok";
+        const draining = isDraining();
+        const allOk = dbStatus === "ok" && !draining;
         const payload = {
-            status: allOk ? "ok" : "degraded",
+            status: draining ? "draining" : dbStatus === "ok" ? "ok" : "degraded",
             timestamp: new Date().toISOString(),
             uptime: Math.floor((Date.now() - serverStartTime) / 1000),
+            turns: chatTurnRegistry.runningCount(),
+            jobs: jobRunRegistry.runningCount(),
             services: {
                 database: dbStatus,
                 server: "ok"
@@ -36,6 +59,17 @@ const healthRoute = async (app) => {
     app.get("/ready", async (_req, reply) => {
         return reply.status(200).send({ status: "ok" });
     });
+    /**
+     * GET /api/health — version and uptime information.
+     * Returns 200 with version from package.json and uptime in seconds.
+     * No authentication required.
+     */
+    app.get("/api/health", async (_req, reply) => {
+        return reply.status(200).send({
+            version: getVersion(),
+            uptime: Math.floor((Date.now() - serverStartTime) / 1000)
+        });
+    });
 };
 export default healthRoute;
 //# sourceMappingURL=health.js.map

package/dist/routes/health.js.map

@@ -1 +1 @@
-{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAEnC,MAAM,WAAW,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IACpD;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,QAAQ,GAAmB,IAAI,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;YACvB,+DAA+D;YAC/D,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,KAAK,IAAI,CAAC;QAEhC,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,GAAG,IAAI,CAAC;YACzD,QAAQ,EAAE;gBACR,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,IAAa;aACtB;SACF,CAAC;QAEF,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,WAAW,CAAC"}
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/routes/health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAEnC,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,OAAO,CAC7B,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EACvC,oBAAoB,CACrB,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,OAAO,WAAW,CAAC,OAAO,IAAI,SAAS,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAuB,KAAK,EAAE,GAAG,EAAE,EAAE;IACpD;;;;;;;;;;OAUG;IACH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,QAAQ,GAAmB,IAAI,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC;QAE7C,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;YACrE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,GAAG,IAAI,CAAC;YACzD,KAAK,EAAE,gBAAgB,CAAC,YAAY,EAAE;YACtC,IAAI,EAAE,cAAc,CAAC,YAAY,EAAE;YACnC,QAAQ,EAAE;gBACR,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,IAAa;aACtB;SACF,CAAC;QAEF,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACtC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,UAAU,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,eAAe,CAAC,GAAG,IAAI,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,WAAW,CAAC"}

package/dist/routes/integrations.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Integration routes — linking an external messaging account to a NodeTool
+ * user, and exchanging that mapping for a short-lived delegated token.
+ *
+ * The caller is a bridge process (the Telegram bot, later Discord), not a
+ * browser: every route authenticates with the server's own
+ * `NODETOOL_INTEGRATION_TOKEN` rather than a user session, which is why these
+ * paths are exempt from the session-auth hook the way the webhook routes are.
+ * A server without that env var registers none of this — every path 404s.
+ *
+ * The bridge never holds a user credential. It proves *which external account*
+ * is speaking; the server decides which NodeTool user that is, and mints a
+ * token scoped to them. Tenant isolation is then the server's usual rules.
+ */
+import type { FastifyPluginAsync } from "fastify";
+import { LinkCodeStore } from "../lib/link-codes.js";
+export interface IntegrationRoutesOptions {
+    /**
+     * The HMAC key delegated tokens are signed with, read lazily so a server
+     * that never mints one never needs the master key.
+     */
+    signingKey: () => Buffer | string;
+    /**
+     * Whether the server enforces authentication. In local single-user trust
+     * mode there is no second user to isolate from, so "link any Telegram
+     * account to user 1" is not linking — `/token` refuses (design §9).
+     */
+    enforceAuth: boolean;
+    /** Injected clock, so code expiry is testable without waiting. */
+    now?: () => number;
+    /**
+     * The link-code store. Defaults to the process-wide one the tRPC router also
+     * uses, which is what lets a deep link minted in the browser be redeemed
+     * here. Tests pass their own.
+     */
+    linkCodes?: LinkCodeStore;
+}
+export declare function createIntegrationRoutes(options: IntegrationRoutesOptions): FastifyPluginAsync;
+//# sourceMappingURL=integrations.d.ts.map

package/dist/routes/integrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrations.d.ts","sourceRoot":"","sources":["../../src/routes/integrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAgC,MAAM,SAAS,CAAC;AAUhF,OAAO,EAAE,aAAa,EAAmB,MAAM,sBAAsB,CAAC;AAoBtE,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,UAAU,EAAE,MAAM,MAAM,GAAG,MAAM,CAAC;IAClC;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAsCD,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,kBAAkB,CAiLpB"}