@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.1

package/dist/routes/timeline-isolate-subject.js

@@ -0,0 +1,128 @@
+/**
+ * Subject isolation — `POST /api/timelines/:id/isolate-subject`.
+ *
+ * The inspector's "Isolate subject" button posts here. Nothing is generated or
+ * written in the browser: the route hands the body to the `isolate_subject`
+ * capability, which reads the stored document, marks the clip's matte in
+ * flight, runs the provider, stores the mask it returns as an asset, and
+ * persists the result. The client reloads the document the capability saved,
+ * so the agent path and the inspector path write the same bytes.
+ *
+ * Unlike the audio bake, this capability calls a provider through a node, so
+ * the run carries the server's node registry. Everything else — the body being
+ * this route's own schema rather than the capability's JSON Schema, the
+ * timeline id coming off the path, a refusal being a 400 — matches
+ * `timeline-audio-bake.ts`, because a browser request is untrusted input at an
+ * HTTP boundary either way.
+ */
+import { z } from "zod";
+import { contextSecretAvailability, createCapabilityRun, gateFromContext } from "@nodetool-ai/agents";
+import { getSecret } from "@nodetool-ai/models";
+import { PERMISSION_GATE_CONTEXT_KEY, ProcessingContext, headlessGate } from "@nodetool-ai/runtime";
+import { bridge } from "../lib/bridge.js";
+import { getUserId, getWorkflowRuntimeEnvironment } from "../http-api.js";
+import { getAssetAdapter } from "../lib/storage.js";
+const ISOLATE_HOST = "isolate-subject route";
+/**
+ * The capability's inputs minus `timeline_id`, which the path carries.
+ *
+ * The two enums are spelled out rather than imported so the door refuses a
+ * value the endpoint would reject; the capability checks them again for
+ * callers that never come through HTTP.
+ */
+export const isolateSubjectRequest = z.object({
+    clip_id: z.string().min(1),
+    model: z
+        .enum([
+        "General Use (Light)",
+        "General Use (Light 2K)",
+        "General Use (Heavy)",
+        "Matting",
+        "Portrait",
+        "General Use (Dynamic)"
+    ])
+        .optional(),
+    operating_resolution: z
+        .enum(["1024x1024", "2048x2048", "2304x2304"])
+        .optional(),
+    refine_foreground: z.boolean().optional(),
+    regenerate: z.boolean().optional(),
+    background: z.boolean().optional()
+});
+function jsonResponse(data, status = 200) {
+    return new Response(JSON.stringify(data ?? null), {
+        status,
+        headers: { "content-type": "application/json" }
+    });
+}
+async function readJsonBody(request) {
+    const contentType = request.headers.get("content-type") ?? "";
+    if (!contentType.toLowerCase().includes("application/json")) {
+        return {};
+    }
+    try {
+        return await request.json();
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * A capability refusal — a missing clip, a clip with no asset, a document that
+ * moved under the call. A generation that ran and failed is not one of these:
+ * it comes back with `status: "failed"` and the previous matte still in place,
+ * which is a 200 the client renders.
+ */
+function capabilityRefusal(result) {
+    if (result !== null &&
+        typeof result === "object" &&
+        !("status" in result) &&
+        typeof result.error === "string") {
+        return result.error;
+    }
+    return null;
+}
+const timelineIsolateSubjectRoutes = async (app, opts) => {
+    const { apiOptions } = opts;
+    app.post("/api/timelines/:id/isolate-subject", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, async (request) => {
+            const userId = getUserId(request, apiOptions.userIdHeader ?? "x-user-id");
+            const parsed = isolateSubjectRequest.safeParse(await readJsonBody(request));
+            if (!parsed.success) {
+                const issue = parsed.error.issues[0];
+                const path = issue?.path.join(".") ?? "";
+                return jsonResponse({
+                    detail: path
+                        ? `${path}: ${issue?.message ?? "Invalid body"}`
+                        : (issue?.message ?? "Invalid body")
+                }, 400);
+            }
+            const context = new ProcessingContext({
+                jobId: `isolate-subject-${Date.now()}`,
+                userId,
+                secretResolver: getSecret,
+                storage: opts.storage ?? getAssetAdapter()
+            });
+            // A route has nobody to ask, so it runs `auto` with escalations denied,
+            // the way every headless host does; the run reads that gate back off
+            // the context rather than being built ungated.
+            context.set(PERMISSION_GATE_CONTEXT_KEY, headlessGate(ISOLATE_HOST));
+            const nodeRegistry = apiOptions.registry ??
+                (await getWorkflowRuntimeEnvironment(apiOptions)).registry;
+            const result = await createCapabilityRun({
+                context,
+                gate: gateFromContext(context, ISOLATE_HOST),
+                nodeRegistry,
+                availableSecrets: contextSecretAvailability(context)
+            }).invoke("isolate_subject", { ...parsed.data, timeline_id: id });
+            const refusal = capabilityRefusal(result);
+            if (refusal !== null) {
+                return jsonResponse({ detail: refusal }, 400);
+            }
+            return jsonResponse(result);
+        });
+    });
+};
+export default timelineIsolateSubjectRoutes;
+//# sourceMappingURL=timeline-isolate-subject.js.map

package/dist/routes/timeline-isolate-subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline-isolate-subject.js","sourceRoot":"","sources":["../../src/routes/timeline-isolate-subject.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,6BAA6B,EAE9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAO7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC;SACL,IAAI,CAAC;QACJ,qBAAqB;QACrB,wBAAwB;QACxB,qBAAqB;QACrB,SAAS;QACT,UAAU;QACV,uBAAuB;KACxB,CAAC;SACD,QAAQ,EAAE;IACb,oBAAoB,EAAE,CAAC;SACpB,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;SAC7C,QAAQ,EAAE;IACb,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAIH,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE;QAChD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,MAAe;IACxC,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC;QACrB,OAAQ,MAA8B,CAAC,KAAK,KAAK,QAAQ,EACzD,CAAC;QACD,OAAQ,MAA4B,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,4BAA4B,GAAqC,KAAK,EAC1E,GAAG,EACH,IAAI,EACJ,EAAE;IACF,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAClE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAC5C,MAAM,YAAY,CAAC,OAAO,CAAC,CAC5B,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,YAAY,CACjB;oBACE,MAAM,EAAE,IAAI;wBACV,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,OAAO,IAAI,cAAc,EAAE;wBAChD,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,CAAC;iBACvC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;gBACpC,KAAK,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,EAAE;gBACtC,MAAM;gBACN,cAAc,EAAE,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE;aAC3C,CAAC,CAAC;YACH,wEAAwE;YACxE,qEAAqE;YACrE,+CAA+C;YAC/C,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;YAErE,MAAM,YAAY,GAChB,UAAU,CAAC,QAAQ;gBACnB,CAAC,MAAM,6BAA6B,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAE7D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;gBACvC,OAAO;gBACP,IAAI,EAAE,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC;gBAC5C,YAAY;gBACZ,gBAAgB,EAAE,yBAAyB,CAAC,OAAO,CAAC;aACrD,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,4BAA4B,CAAC"}

package/dist/routes/timeline-track-object.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Subject tracking — `POST /api/timelines/:id/track-object`.
+ *
+ * The inspector sends the same inputs as the `track_object` capability. The
+ * capability owns source validation, provider execution, and compare-and-swap
+ * persistence, so the browser never writes a MediaTrack directly.
+ */
+import type { FastifyPluginAsync } from "fastify";
+import { z } from "zod";
+import type { StorageAdapter } from "@nodetool-ai/storage";
+import { type HttpApiOptions } from "../http-api.js";
+interface RouteOptions {
+    apiOptions: HttpApiOptions;
+    storage?: StorageAdapter;
+}
+export declare const trackObjectRequest: z.ZodObject<{
+    clip_id: z.ZodString;
+    provider: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    initial_region: z.ZodObject<{
+        x: z.ZodNumber;
+        y: z.ZodNumber;
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, z.core.$strip>;
+    start_ms: z.ZodNumber;
+    end_ms: z.ZodNumber;
+    direction: z.ZodOptional<z.ZodEnum<{
+        backward: "backward";
+        both: "both";
+        forward: "forward";
+    }>>;
+    track_id: z.ZodOptional<z.ZodString>;
+    regenerate: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+declare const timelineTrackObjectRoutes: FastifyPluginAsync<RouteOptions>;
+export default timelineTrackObjectRoutes;
+//# sourceMappingURL=timeline-track-object.d.ts.map

package/dist/routes/timeline-track-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline-track-object.d.ts","sourceRoot":"","sources":["../../src/routes/timeline-track-object.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAKxB,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;iBAgB7B,CAAC;AA+BH,QAAA,MAAM,yBAAyB,EAAE,kBAAkB,CAAC,YAAY,CAmD/D,CAAC;eAEa,yBAAyB"}

package/dist/routes/timeline-track-object.js

@@ -0,0 +1,97 @@
+/**
+ * Subject tracking — `POST /api/timelines/:id/track-object`.
+ *
+ * The inspector sends the same inputs as the `track_object` capability. The
+ * capability owns source validation, provider execution, and compare-and-swap
+ * persistence, so the browser never writes a MediaTrack directly.
+ */
+import { z } from "zod";
+import { contextSecretAvailability, createCapabilityRun, gateFromContext } from "@nodetool-ai/agents";
+import { getSecret } from "@nodetool-ai/models";
+import { PERMISSION_GATE_CONTEXT_KEY, ProcessingContext, headlessGate } from "@nodetool-ai/runtime";
+import { bridge } from "../lib/bridge.js";
+import { getUserId, getWorkflowRuntimeEnvironment } from "../http-api.js";
+import { getAssetAdapter } from "../lib/storage.js";
+const TRACK_OBJECT_HOST = "track-object route";
+export const trackObjectRequest = z.object({
+    clip_id: z.string().min(1),
+    provider: z.string().min(1).optional(),
+    model: z.string().min(1).optional(),
+    name: z.string().min(1).optional(),
+    initial_region: z.object({
+        x: z.number(),
+        y: z.number(),
+        width: z.number(),
+        height: z.number()
+    }),
+    start_ms: z.number(),
+    end_ms: z.number(),
+    direction: z.enum(["forward", "backward", "both"]).optional(),
+    track_id: z.string().min(1).optional(),
+    regenerate: z.boolean().optional()
+});
+function jsonResponse(data, status = 200) {
+    return new Response(JSON.stringify(data ?? null), {
+        status,
+        headers: { "content-type": "application/json" }
+    });
+}
+async function readJsonBody(request) {
+    const contentType = request.headers.get("content-type") ?? "";
+    if (!contentType.toLowerCase().includes("application/json"))
+        return {};
+    try {
+        return await request.json();
+    }
+    catch {
+        return {};
+    }
+}
+function capabilityRefusal(result) {
+    if (result !== null &&
+        typeof result === "object" &&
+        typeof result.error === "string" &&
+        !("status" in result)) {
+        return result.error;
+    }
+    return null;
+}
+const timelineTrackObjectRoutes = async (app, opts) => {
+    app.post("/api/timelines/:id/track-object", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, async (request) => {
+            const userId = getUserId(request, opts.apiOptions.userIdHeader ?? "x-user-id");
+            const parsed = trackObjectRequest.safeParse(await readJsonBody(request));
+            if (!parsed.success) {
+                const issue = parsed.error.issues[0];
+                const path = issue?.path.join(".") ?? "";
+                return jsonResponse({
+                    detail: path
+                        ? `${path}: ${issue?.message ?? "Invalid body"}`
+                        : (issue?.message ?? "Invalid body")
+                }, 400);
+            }
+            const context = new ProcessingContext({
+                jobId: `track-object-${Date.now()}`,
+                userId,
+                secretResolver: getSecret,
+                storage: opts.storage ?? getAssetAdapter()
+            });
+            context.set(PERMISSION_GATE_CONTEXT_KEY, headlessGate(TRACK_OBJECT_HOST));
+            const nodeRegistry = opts.apiOptions.registry ??
+                (await getWorkflowRuntimeEnvironment(opts.apiOptions)).registry;
+            const result = await createCapabilityRun({
+                context,
+                gate: gateFromContext(context, TRACK_OBJECT_HOST),
+                nodeRegistry,
+                availableSecrets: contextSecretAvailability(context)
+            }).invoke("track_object", { ...parsed.data, timeline_id: id });
+            const refusal = capabilityRefusal(result);
+            if (refusal !== null)
+                return jsonResponse({ detail: refusal }, 400);
+            return jsonResponse(result);
+        });
+    });
+};
+export default timelineTrackObjectRoutes;
+//# sourceMappingURL=timeline-track-object.js.map

package/dist/routes/timeline-track-object.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeline-track-object.js","sourceRoot":"","sources":["../../src/routes/timeline-track-object.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,EAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,YAAY,EACb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,6BAA6B,EAE9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAO/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE;QAChD,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAgB;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAe;IACxC,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAQ,MAA8B,CAAC,KAAK,KAAK,QAAQ;QACzD,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,EACrB,CAAC;QACD,OAAQ,MAA4B,CAAC,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,yBAAyB,GAAqC,KAAK,EACvE,GAAG,EACH,IAAI,EACJ,EAAE;IACF,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,EACP,IAAI,CAAC,UAAU,CAAC,YAAY,IAAI,WAAW,CAC5C,CAAC;YACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,YAAY,CACjB;oBACE,MAAM,EAAE,IAAI;wBACV,CAAC,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,OAAO,IAAI,cAAc,EAAE;wBAChD,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,CAAC;iBACvC,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;gBACpC,KAAK,EAAE,gBAAgB,IAAI,CAAC,GAAG,EAAE,EAAE;gBACnC,MAAM;gBACN,cAAc,EAAE,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE;aAC3C,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CACT,2BAA2B,EAC3B,YAAY,CAAC,iBAAiB,CAAC,CAChC,CAAC;YAEF,MAAM,YAAY,GAChB,IAAI,CAAC,UAAU,CAAC,QAAQ;gBACxB,CAAC,MAAM,6BAA6B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAClE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;gBACvC,OAAO;gBACP,IAAI,EAAE,eAAe,CAAC,OAAO,EAAE,iBAAiB,CAAC;gBACjD,YAAY;gBACZ,gBAAgB,EAAE,yBAAyB,CAAC,OAAO,CAAC;aACrD,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;YAE/D,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACpE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,yBAAyB,CAAC"}

package/dist/routes/timelines.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Timeline zip download and upload —
+ *   `GET  /api/timelines/:id/export-zip`
+ *   `POST /api/timelines/import-zip`
+ *
+ * The web app reads and writes sequences over `/trpc/timeline.*`; these are the
+ * two non-tRPC doors, because one response is a binary archive and the other
+ * request is a multipart upload. Both go through `lib/timeline-bundle.ts`, so a
+ * bundle written here imports anywhere.
+ */
+import type { FastifyPluginAsync } from "fastify";
+import { type HttpApiOptions } from "../http-api.js";
+interface RouteOptions {
+    apiOptions: HttpApiOptions;
+}
+declare const timelinesRoutes: FastifyPluginAsync<RouteOptions>;
+export default timelinesRoutes;
+//# sourceMappingURL=timelines.d.ts.map

package/dist/routes/timelines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timelines.d.ts","sourceRoot":"","sources":["../../src/routes/timelines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAQlD,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAWhE,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AA8FD,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CA+GrD,CAAC;eAEa,eAAe"}

package/dist/routes/timelines.js

@@ -0,0 +1,191 @@
+/**
+ * Timeline zip download and upload —
+ *   `GET  /api/timelines/:id/export-zip`
+ *   `POST /api/timelines/import-zip`
+ *
+ * The web app reads and writes sequences over `/trpc/timeline.*`; these are the
+ * two non-tRPC doors, because one response is a binary archive and the other
+ * request is a multipart upload. Both go through `lib/timeline-bundle.ts`, so a
+ * bundle written here imports anywhere.
+ */
+import { Asset, TimelineSequence, timelineDocumentDurationMs } from "@nodetool-ai/models";
+import { bridge, streamedResponse } from "../lib/bridge.js";
+import { getUserId } from "../http-api.js";
+import { resolveAssetExportSource } from "../lib/asset-export.js";
+import { createAssetModelInterface } from "../lib/asset-model-interface.js";
+import { importTimelineBundle, writeTimelineBundle } from "../lib/timeline-bundle.js";
+import { streamZip } from "../lib/zip-stream.js";
+/** The `LOOSE_PROJECT_ID` value: documents that belong to no project. */
+const DEFAULT_PROJECT_ID = "default";
+function jsonError(status, detail) {
+    return new Response(JSON.stringify({ detail }), {
+        status,
+        headers: { "content-type": "application/json" }
+    });
+}
+/** The source for one asset the caller owns, or null when the row or object is gone. */
+async function fetchOwnedAsset(userId, assetId) {
+    const asset = (await Asset.get(assetId));
+    // Another owner's asset is an absence here, not a refusal: a clip can name an
+    // id that is not the caller's, and an export must not copy those bytes out.
+    if (!asset || asset.user_id !== userId) {
+        return null;
+    }
+    // A local file is streamed from disk; only a store with no local file
+    // hands over bytes.
+    const source = await resolveAssetExportSource(asset);
+    if (!source) {
+        return null;
+    }
+    return { source, name: asset.name, contentType: asset.content_type };
+}
+/** The bundle payload for a stored sequence: the wire shape minus db fields. */
+function toBundledTimeline(seq) {
+    const wire = seq.toTimelineSequence();
+    const bundled = {
+        name: wire.name,
+        fps: wire.fps,
+        width: wire.width,
+        height: wire.height,
+        durationMs: wire.durationMs,
+        tracks: wire.tracks,
+        clips: wire.clips,
+        markers: wire.markers,
+        transcript: wire.transcript ?? []
+    };
+    if (wire.workflowId) {
+        bundled.workflowId = wire.workflowId;
+    }
+    if (wire.scriptEnabled !== undefined) {
+        bundled.scriptEnabled = wire.scriptEnabled;
+    }
+    return bundled;
+}
+async function readImportUpload(request) {
+    const contentType = request.headers.get("content-type") ?? "";
+    if (!contentType.toLowerCase().includes("multipart/form-data")) {
+        return jsonError(400, "A multipart form with a `file` part is required");
+    }
+    let form;
+    try {
+        form = await request.formData();
+    }
+    catch {
+        return jsonError(400, "Invalid multipart form data");
+    }
+    const file = form.get("file");
+    if (!(file instanceof File)) {
+        return jsonError(400, "A timeline bundle file is required");
+    }
+    const projectId = form.get("project_id");
+    const name = form.get("name");
+    const upload = {
+        zipBytes: new Uint8Array(await file.arrayBuffer()),
+        projectId: typeof projectId === "string" && projectId !== ""
+            ? projectId
+            : DEFAULT_PROJECT_ID
+    };
+    if (typeof name === "string" && name !== "") {
+        upload.name = name;
+    }
+    return upload;
+}
+const timelinesRoutes = async (app, opts) => {
+    const { apiOptions } = opts;
+    const userIdOf = (request) => getUserId(request, apiOptions.userIdHeader ?? "x-user-id");
+    // Registered before the parametric route so `import-zip` is never read as a
+    // timeline id.
+    app.post("/api/timelines/import-zip", async (req, reply) => {
+        await bridge(req, reply, async (request) => {
+            const userId = userIdOf(request);
+            const upload = await readImportUpload(request);
+            if (upload instanceof Response) {
+                return upload;
+            }
+            let result;
+            try {
+                result = await importTimelineBundle(upload.zipBytes, {
+                    storeAsset: async ({ bytes, name, contentType }) => {
+                        const asset = await createAssetModelInterface({
+                            userId,
+                            name,
+                            contentType,
+                            content: bytes
+                        });
+                        return { assetId: asset.id };
+                    }
+                });
+            }
+            catch (error) {
+                return jsonError(400, `Invalid bundle: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            const doc = {
+                tracks: result.timeline.tracks,
+                clips: result.timeline.clips,
+                markers: result.timeline.markers,
+                transcript: result.timeline.transcript ?? []
+            };
+            if (result.timeline.scriptEnabled !== undefined) {
+                doc.scriptEnabled = result.timeline.scriptEnabled;
+            }
+            // Import always creates a new sequence, like the workflow bundle and the
+            // list panel's Duplicate — it never overwrites an existing one.
+            const seq = new TimelineSequence({
+                user_id: userId,
+                project_id: upload.projectId,
+                name: upload.name ?? result.timeline.name,
+                fps: result.timeline.fps,
+                width: result.timeline.width,
+                height: result.timeline.height,
+                // Carried as written: a workflow id means something only on the
+                // exporting install, and rewriting it would invent a link that is not
+                // there. The manifest lists it under `foreign_refs` for the same reason.
+                workflow_id: result.timeline.workflowId ?? null
+            });
+            seq.fromDocument(doc);
+            seq.duration_ms = timelineDocumentDurationMs(doc);
+            await seq.save();
+            return new Response(JSON.stringify({
+                timeline: seq.toTimelineSequence(),
+                imported: result.imported.length,
+                missing: result.missing,
+                checksum_mismatches: result.checksumMismatches
+            }), { status: 200, headers: { "content-type": "application/json" } });
+        });
+    });
+    app.get("/api/timelines/:id/export-zip", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, async (request) => {
+            const userId = userIdOf(request);
+            const seq = await TimelineSequence.findById(id);
+            // Sequences are per-user, like boards and sketches: another owner's
+            // timeline is an absence, not a refusal.
+            if (!seq || seq.user_id !== userId) {
+                return jsonError(404, "Timeline not found");
+            }
+            const sequence = toBundledTimeline(seq);
+            // The archive streams as it is written, so neither an asset nor the
+            // zip is ever held in memory whole.
+            const body = streamZip(async (writer) => {
+                await writeTimelineBundle({
+                    sequence,
+                    fetchAsset: (assetId) => fetchOwnedAsset(userId, assetId)
+                }, writer);
+            });
+            const safe = (seq.name || "timeline").replace(/[^A-Za-z0-9._-]+/g, "_") ||
+                "timeline";
+            return streamedResponse(body, {
+                status: 200,
+                headers: {
+                    "content-type": "application/zip",
+                    "content-disposition": `attachment; filename="${safe}.zip"`,
+                    "cache-control": "no-store"
+                }
+            });
+        });
+        // A streamed body is still being sent when bridge returns.
+        return reply;
+    });
+};
+export default timelinesRoutes;
+//# sourceMappingURL=timelines.js.map

package/dist/routes/timelines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timelines.js","sourceRoot":"","sources":["../../src/routes/timelines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,0BAA0B,EAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAuB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAMjD,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAC9C,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAiB,CAAC;IACzD,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AACvE,CAAC;AAED,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,GAAqB;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD,KAAK,UAAU,gBAAgB,CAC7B,OAAgB;IAEhB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC,GAAG,EAAE,iDAAiD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAiB;QAC3B,QAAQ,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAClD,SAAS,EACP,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kBAAkB;KACzB,CAAC;IACF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,eAAe,GAAqC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAU,EAAE,CAC5C,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;IAE7D,4EAA4E;IAC5E,eAAe;IACf,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,IAAI,MAAwD,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE;oBACnD,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;wBACjD,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC;4BAC5C,MAAM;4BACN,IAAI;4BACJ,WAAW;4BACX,OAAO,EAAE,KAAK;yBACf,CAAC,CAAC;wBACH,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;oBAC/B,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CACd,GAAG,EACH,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAqB;gBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;gBAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAChC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE;aAC7C,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChD,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YACpD,CAAC;YACD,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC;gBAC/B,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI;gBACzC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;gBACxB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;gBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC9B,gEAAgE;gBAChE,sEAAsE;gBACtE,yEAAyE;gBACzE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;aAChD,CAAC,CAAC;YACH,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACtB,GAAG,CAAC,WAAW,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAEjB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE;gBAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAChC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,mBAAmB,EAAE,MAAM,CAAC,kBAAkB;aAC/C,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChD,oEAAoE;YACpE,yCAAyC;YACzC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACxC,oEAAoE;YACpE,oCAAoC;YACpC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACtC,MAAM,mBAAmB,CACvB;oBACE,QAAQ;oBACR,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC1D,EACD,MAAM,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GACR,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;gBAC1D,UAAU,CAAC;YACb,OAAO,gBAAgB,CAAC,IAAI,EAAE;gBAC5B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,iBAAiB;oBACjC,qBAAqB,EAAE,yBAAyB,IAAI,OAAO;oBAC3D,eAAe,EAAE,UAAU;iBAC5B;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,2DAA2D;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/workflows.d.ts

@@ -1,16 +1,13 @@
 /**
- * Workflows REST routes — minimal file-download remnant.
+ * Workflows REST routes — file downloads and JSON metadata used outside tRPC.
  *
- * All JSON-based workflow operations have been migrated to the tRPC router
- * at `/trpc/workflows.*`.
- *
- * Retained here (file downloads that can't travel through tRPC's JSON layer):
- *   GET  /api/workflows/:id/dsl-export   — TypeScript DSL source download
- *   POST /api/workflows/:id/gradio-export — 501 stub (Gradio not supported in standalone mode)
- *   GET  /api/workflows/examples/thumbnails/:filename — Example workflow thumbnail images
+ * The web app uses `/trpc/workflows.*`. These routes serve:
+ *   - Workflow list, creation, and detail JSON for SDKs and agents
+ *   - Public workflows, examples, tools, names (parity with `http-api` router)
+ *   - File endpoints that cannot use tRPC's JSON layer (DSL export, thumbnails)
  */
 import type { FastifyPluginAsync } from "fastify";
-import type { HttpApiOptions } from "../http-api.js";
+import { type HttpApiOptions } from "../http-api.js";
 interface RouteOptions {
     apiOptions: HttpApiOptions;
 }

package/dist/routes/workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAOrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAyBrD,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAmBhE,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAqKrD,CAAC;eAEa,eAAe"}