@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/routes/assets.js

@@ -1,5 +1,10 @@
+import multipart from "@fastify/multipart";
+import { FileStorageAdapter } from "@nodetool-ai/storage";
+import { getAssetAdapter } from "../lib/storage.js";
+import { handleLocalAssetUpload } from "../lib/local-asset-upload.js";
 import { bridge } from "../lib/bridge.js";
-import { handleAssetsRoot, handleAssetThumbnail } from "../http-api.js";
+import { getUserId, handleAssetsRoot, handleExtractAudio } from "../http-api.js";
+import { handleAssetPeaks } from "../lib/audio-peaks.js";
 import { loadPythonPackageMetadata } from "@nodetool-ai/node-sdk";
 import { ApiErrorCode, apiError } from "../error-codes.js";
 /**
@@ -9,15 +14,19 @@ import { ApiErrorCode, apiError } from "../error-codes.js";
  *
  * Still served via REST:
  *   - POST   /api/assets                            — multipart file upload
- *   - GET    /api/assets/:id/thumbnail              — binary thumbnail
- *   - POST   /api/assets/:id/thumbnail              — 501 stub
  *   - POST   /api/assets/download                   — 501 stub (ZIP download)
  *   - GET    /api/assets/packages                   — empty list stub
  *   - GET    /api/assets/packages/:package          — empty list stub
  *   - GET    /api/assets/packages/:package/:asset   — binary asset file stream
+ *   - POST   /api/assets/:id/extract-audio          — video audio track to a WAV asset
+ *   - GET    /api/assets/:id/peaks                  — waveform peaks, cached on disk
  */
 const assetsRoutes = async (app, opts) => {
     const { apiOptions } = opts;
+    const localUploads = getAssetAdapter() instanceof FileStorageAdapter;
+    if (localUploads) {
+        await app.register(multipart);
+    }
     // Stub: no package listing in standalone mode.
     app.get("/api/assets/packages", async (_req, reply) => {
         reply.send({ assets: [], next: null });
@@ -32,14 +41,14 @@ const assetsRoutes = async (app, opts) => {
     app.get("/api/assets/packages/:packageName", async (_req, reply) => {
         reply.send({ assets: [], next: null });
     });
-    app.get("/api/assets/packages/:packageName/:assetName", async (req, reply) => {
-        const { packageName, assetName } = req.params;
+    app.get("/api/assets/packages/:packageName/*", async (req, reply) => {
+        const params = req.params;
         await bridge(req, reply, async (_request) => {
             let pkgName;
             let aName;
             try {
-                pkgName = decodeURIComponent(packageName);
-                aName = decodeURIComponent(assetName);
+                pkgName = decodeURIComponent(params.packageName);
+                aName = decodeURIComponent(params["*"] ?? "");
             }
             catch {
                 return new Response(JSON.stringify(apiError(ApiErrorCode.INVALID_INPUT, "Invalid URL encoding")), {
@@ -47,32 +56,24 @@ const assetsRoutes = async (app, opts) => {
                     headers: { "content-type": "application/json" }
                 });
             }
+            // `aName` may be a nested path (e.g. `audio/loop.mp3`). Reject empty,
+            // backslash, and traversal segments; `..` is checked per-segment.
+            const segments = aName.split("/");
             if (!pkgName ||
                 !aName ||
-                pkgName.includes("..") ||
-                aName.includes("..") ||
+                pkgName === "." ||
+                pkgName === ".." ||
                 pkgName.includes("/") ||
-                aName.includes("/") ||
                 pkgName.includes("\\") ||
-                aName.includes("\\")) {
+                aName.includes("\\") ||
+                segments.some((s) => s === "" || s === "." || s === "..")) {
                 return new Response(JSON.stringify(apiError(ApiErrorCode.ASSET_NOT_FOUND, "Not found")), {
                     status: 404,
                     headers: { "content-type": "application/json" }
                 });
             }
-            const loaded = loadPythonPackageMetadata({
-                roots: apiOptions.metadataRoots,
-                maxDepth: apiOptions.metadataMaxDepth
-            });
-            const pkg = loaded.packages.find((p) => p.name === pkgName);
-            if (!pkg || !pkg.sourceFolder) {
-                return new Response(JSON.stringify(apiError(ApiErrorCode.NOT_FOUND, `Package '${pkgName}' not found`)), {
-                    status: 404,
-                    headers: { "content-type": "application/json" }
-                });
-            }
             const { createReadStream, statSync } = await import("node:fs");
-            const { extname, resolve } = await import("node:path");
+            const { extname, resolve, relative, isAbsolute } = await import("node:path");
             const mimeTypes = {
                 ".jpg": "image/jpeg",
                 ".jpeg": "image/jpeg",
@@ -81,30 +82,58 @@ const assetsRoutes = async (app, opts) => {
                 ".webp": "image/webp",
                 ".svg": "image/svg+xml",
                 ".mp3": "audio/mpeg",
+                ".wav": "audio/wav",
                 ".mp4": "video/mp4",
                 ".webm": "video/webm",
                 ".json": "application/json",
                 ".txt": "text/plain"
             };
-            const baseDir = resolve(`${pkg.sourceFolder}/nodetool/assets/${pkgName}`);
-            const assetPath = resolve(baseDir, aName);
-            // Prevent path traversal.
-            if (!assetPath.startsWith(baseDir + "/") && assetPath !== baseDir) {
-                return new Response(JSON.stringify(apiError(ApiErrorCode.ASSET_NOT_FOUND, "Not found")), {
-                    status: 404,
-                    headers: { "content-type": "application/json" }
-                });
+            // Resolve `<baseDir>/<segments...>` with a separator-agnostic
+            // containment guard (works on Windows, where startsWith(baseDir + "/")
+            // would not).
+            const tryServe = (baseDir) => {
+                const candidate = resolve(baseDir, ...segments);
+                const rel = relative(baseDir, candidate);
+                if (rel.startsWith("..") || isAbsolute(rel)) {
+                    return null;
+                }
+                try {
+                    const st = statSync(candidate);
+                    if (!st.isFile())
+                        return null;
+                    return { path: candidate, size: st.size, mtimeMs: st.mtimeMs };
+                }
+                catch {
+                    return null;
+                }
+            };
+            // Configured bundled roots first (no Python needed). Only fall back to
+            // Python package metadata — which walks the filesystem — when the asset
+            // isn't found in a configured root, keeping the hot path cheap.
+            let hit = null;
+            for (const root of apiOptions.packageAssetsRoots ?? []) {
+                hit = tryServe(resolve(root, pkgName));
+                if (hit)
+                    break;
             }
-            let fileStat;
-            try {
-                fileStat = statSync(assetPath);
+            if (!hit) {
+                const loaded = loadPythonPackageMetadata({
+                    roots: apiOptions.metadataRoots,
+                    maxDepth: apiOptions.metadataMaxDepth
+                });
+                const pkg = loaded.packages.find((p) => p.name === pkgName);
+                if (pkg?.sourceFolder) {
+                    hit = tryServe(resolve(`${pkg.sourceFolder}/nodetool/assets/${pkgName}`));
+                }
             }
-            catch {
+            if (!hit) {
                 return new Response(JSON.stringify(apiError(ApiErrorCode.ASSET_NOT_FOUND, `Asset '${aName}' not found in package '${pkgName}'`)), {
                     status: 404,
                     headers: { "content-type": "application/json" }
                 });
             }
+            const assetPath = hit.path;
+            const fileStat = { size: hit.size, mtimeMs: hit.mtimeMs };
             const contentType = mimeTypes[extname(aName).toLowerCase()] ?? "application/octet-stream";
             const stream = createReadStream(assetPath);
             const webStream = new ReadableStream({
@@ -149,20 +178,25 @@ const assetsRoutes = async (app, opts) => {
             });
         });
     });
-    // Binary thumbnail serving + POST stub.
-    app.get("/api/assets/:id/thumbnail", async (req, reply) => {
-        const { id } = req.params;
-        await bridge(req, reply, (request) => handleAssetThumbnail(request, decodeURIComponent(id), apiOptions));
-    });
-    app.post("/api/assets/:id/thumbnail", async (req, reply) => {
-        const { id } = req.params;
-        await bridge(req, reply, (request) => handleAssetThumbnail(request, decodeURIComponent(id), apiOptions));
-    });
     // Multipart asset upload (file POST). The handler also accepts JSON bodies,
     // but the tRPC `assets.create` procedure is the preferred path for JSON.
     app.post("/api/assets", async (req, reply) => {
+        if (localUploads && req.isMultipart()) {
+            await handleLocalAssetUpload(req, reply, apiOptions);
+            return;
+        }
         await bridge(req, reply, (request) => handleAssetsRoot(request, apiOptions));
     });
+    // Extract a video asset's audio track into a new audio asset.
+    app.post("/api/assets/:id/extract-audio", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, (request) => handleExtractAudio(request, apiOptions, id));
+    });
+    // Waveform peaks for an audio or video asset (the timeline's clip waveforms).
+    app.get("/api/assets/:id/peaks", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, (request) => handleAssetPeaks(getUserId(request, apiOptions.userIdHeader ?? "x-user-id"), id, new URL(request.url).searchParams));
+    });
 };
 export default assetsRoutes;
 //# sourceMappingURL=assets.js.map

package/dist/routes/assets.js.map

@@ -1 +1 @@
-{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/routes/assets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM3D;;;;;;;;;;;;;GAaG;AACH,MAAM,YAAY,GAAqC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACrD,KAAK;aACF,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CACH,QAAQ,CACN,YAAY,CAAC,mBAAmB,EAChC,+CAA+C,CAChD,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,8CAA8C,EAC9C,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,MAGtC,CAAC;QACF,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC1C,IAAI,OAAe,CAAC;YACpB,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;gBAC1C,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAC7D,EACD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,IACE,CAAC,OAAO;gBACR,CAAC,KAAK;gBACN,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACrB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACnB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpB,CAAC;gBACD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,EACnE;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,yBAAyB,CAAC;gBACvC,KAAK,EAAE,UAAU,CAAC,aAAa;gBAC/B,QAAQ,EAAE,UAAU,CAAC,gBAAgB;aACtC,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC9B,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,YAAY,OAAO,aAAa,CAAC,CACnE,EACD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,SAAS,GAA2B;gBACxC,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,kBAAkB;gBAC3B,MAAM,EAAE,YAAY;aACrB,CAAC;YACF,MAAM,OAAO,GAAG,OAAO,CACrB,GAAG,GAAG,CAAC,YAAY,oBAAoB,OAAO,EAAE,CACjD,CAAC;YACF,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1C,0BAA0B;YAC1B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;gBAClE,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,EACnE;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,IAAI,QAA2C,CAAC;YAChD,IAAI,CAAC;gBACH,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,QAAQ,CACN,YAAY,CAAC,eAAe,EAC5B,UAAU,KAAK,2BAA2B,OAAO,GAAG,CACrD,CACF,EACD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GACf,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;YACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;gBACnC,KAAK,CAAC,UAAU;oBACd,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;wBAC1B,IAAI,CAAC;4BACH,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5B,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACpB,IAAI,CAAC;4BACH,UAAU,CAAC,KAAK,EAAE,CAAC;wBACrB,CAAC;wBAAC,MAAM,CAAC;4BACP,oBAAoB;wBACtB,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACzB,IAAI,CAAC;4BACH,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACxB,CAAC;wBAAC,MAAM,CAAC;4BACP,qBAAqB;wBACvB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;oBACJ,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;aACF,CAAC,CAAC;YACH,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;gBAC7B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,WAAW;oBAC3B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACvC,eAAe,EAAE,qCAAqC;oBACtD,IAAI,EAAE,IAAI,OAAO,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,GAAG;iBACnE;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,wCAAwC;IACxC,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,yEAAyE;IACzE,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CACtC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../src/routes/assets.ts"],"names":[],"mappings":"AACA,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAEnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM3D;;;;;;;;;;;;;GAaG;AACH,MAAM,YAAY,GAAqC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,YAAY,GAAG,eAAe,EAAE,YAAY,kBAAkB,CAAC;IACrE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAED,+CAA+C;IAC/C,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACpD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,uDAAuD;IACvD,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACrD,KAAK;aACF,MAAM,CAAC,GAAG,CAAC;aACX,IAAI,CACH,QAAQ,CACN,YAAY,CAAC,mBAAmB,EAChC,+CAA+C,CAChD,CACF,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACjE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CACL,qCAAqC,EACrC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,MAAM,GAAG,GAAG,CAAC,MAA8C,CAAC;QAClE,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;YAC1C,IAAI,OAAe,CAAC;YACpB,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBACjD,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,QAAQ,CAAC,YAAY,CAAC,aAAa,EAAE,sBAAsB,CAAC,CAC7D,EACD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,kEAAkE;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,IACE,CAAC,OAAO;gBACR,CAAC,KAAK;gBACN,OAAO,KAAK,GAAG;gBACf,OAAO,KAAK,IAAI;gBAChB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACrB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACtB,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,EACzD,CAAC;gBACD,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC,EACnE;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAC7D,WAAW,CACZ,CAAC;YACF,MAAM,SAAS,GAA2B;gBACxC,MAAM,EAAE,YAAY;gBACpB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,YAAY;gBACrB,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,kBAAkB;gBAC3B,MAAM,EAAE,YAAY;aACrB,CAAC;YAEF,8DAA8D;YAC9D,uEAAuE;YACvE,cAAc;YACd,MAAM,QAAQ,GAAG,CACf,OAAe,EACyC,EAAE;gBAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,CAAC;gBAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBACzC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5C,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAC/B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;wBAAE,OAAO,IAAI,CAAC;oBAC9B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YAEF,uEAAuE;YACvE,wEAAwE;YACxE,gEAAgE;YAChE,IAAI,GAAG,GAA2D,IAAI,CAAC;YACvE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,kBAAkB,IAAI,EAAE,EAAE,CAAC;gBACvD,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;gBACvC,IAAI,GAAG;oBAAE,MAAM;YACjB,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,MAAM,GAAG,yBAAyB,CAAC;oBACvC,KAAK,EAAE,UAAU,CAAC,aAAa;oBAC/B,QAAQ,EAAE,UAAU,CAAC,gBAAgB;iBACtC,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;gBAC5D,IAAI,GAAG,EAAE,YAAY,EAAE,CAAC;oBACtB,GAAG,GAAG,QAAQ,CACZ,OAAO,CAAC,GAAG,GAAG,CAAC,YAAY,oBAAoB,OAAO,EAAE,CAAC,CAC1D,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CACZ,QAAQ,CACN,YAAY,CAAC,eAAe,EAC5B,UAAU,KAAK,2BAA2B,OAAO,GAAG,CACrD,CACF,EACD;oBACE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CACF,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC;YAC3B,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAC1D,MAAM,WAAW,GACf,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;YACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC;gBACnC,KAAK,CAAC,UAAU;oBACd,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;wBAC1B,IAAI,CAAC;4BACH,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5B,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACpB,IAAI,CAAC;4BACH,UAAU,CAAC,KAAK,EAAE,CAAC;wBACrB,CAAC;wBAAC,MAAM,CAAC;4BACP,oBAAoB;wBACtB,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACzB,IAAI,CAAC;4BACH,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;wBACxB,CAAC;wBAAC,MAAM,CAAC;4BACP,qBAAqB;wBACvB,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM;oBACJ,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;aACF,CAAC,CAAC;YACH,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;gBAC7B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,WAAW;oBAC3B,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACvC,eAAe,EAAE,qCAAqC;oBACtD,IAAI,EAAE,IAAI,OAAO,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,GAAG;iBACnE;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,4EAA4E;IAC5E,yEAAyE;IACzE,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3C,IAAI,YAAY,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtC,MAAM,sBAAsB,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CACtC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,gBAAgB,CACd,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,IAAI,WAAW,CAAC,EAC1D,EAAE,EACF,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAClC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/routes/atlascloud-webhook.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Authenticated AtlasCloud prediction webhook ingress.
+ *
+ * AtlasCloud signs each callback with Ed25519 over `<timestamp>.<raw body>` and
+ * publishes the public keys as a JWKS (https://atlascloud.ai/docs/en/webhooks).
+ * The route verifies that signature, then hands the callback to the in-process
+ * registry the submitting run is waiting on. It does no provider I/O of its
+ * own: a callback is an optimization over polling the prediction endpoint, so a
+ * delivery this process cannot match is acknowledged rather than retried.
+ */
+import type { FastifyPluginAsync } from "fastify";
+import { type AtlasPollResult } from "@nodetool-ai/runtime";
+export declare const ATLASCLOUD_WEBHOOK_PATH = "/api/providers/atlascloud/webhook";
+export declare const ATLASCLOUD_WEBHOOK_JWKS_URL = "https://api.atlascloud.ai/api/v1/webhooks/jwks.json";
+export declare const ATLASCLOUD_WEBHOOK_TIMESTAMP_WINDOW_SECONDS = 300;
+export declare const ATLASCLOUD_WEBHOOK_JWKS_CACHE_TTL_MS: number;
+/**
+ * Shortest gap between two key-rotation refreshes.
+ *
+ * This route is unauthenticated by design, so an unknown key id is something
+ * any caller can present. Without a floor, a stream of made-up key ids would
+ * turn each one into an outbound JWKS request at the route's rate limit. A
+ * real rotation still resolves within one cooldown.
+ */
+export declare const ATLASCLOUD_WEBHOOK_ROTATION_COOLDOWN_MS: number;
+export declare const ATLASCLOUD_WEBHOOK_MAX_BODY_BYTES: number;
+export interface AtlasCloudWebhookHeaders {
+    readonly webhookId: string;
+    readonly timestamp: string;
+    readonly signature: string;
+    readonly keyId: string;
+}
+export interface AtlasCloudWebhookJwk {
+    readonly kty: "OKP";
+    readonly crv: "Ed25519";
+    readonly x: string;
+    readonly kid?: string;
+    readonly alg?: string;
+    readonly use?: string;
+}
+export type AtlasCloudWebhookVerificationResult = {
+    readonly ok: true;
+    readonly headers: AtlasCloudWebhookHeaders;
+} | {
+    readonly ok: false;
+    readonly retryable: boolean;
+    readonly reason: "missing_header" | "invalid_header" | "invalid_timestamp" | "stale_timestamp" | "unknown_key" | "invalid_signature" | "jwks_unavailable";
+};
+export interface AtlasCloudWebhookVerifierOptions {
+    readonly fetchJwks?: () => Promise<readonly AtlasCloudWebhookJwk[]>;
+    readonly now?: () => number;
+    readonly cacheTtlMs?: number;
+    readonly rotationCooldownMs?: number;
+}
+/**
+ * AtlasCloud Ed25519 verifier. Key refreshes are coalesced so a burst of
+ * callbacks cannot turn a key rotation or a cold start into a request storm.
+ */
+export declare class AtlasCloudWebhookVerifier {
+    private readonly fetchJwks;
+    private readonly now;
+    private readonly cacheTtlMs;
+    private readonly rotationCooldownMs;
+    private cachedKeys;
+    private cacheExpiresAt;
+    private lastRotationRefreshAt;
+    private refreshPromise;
+    constructor(options?: AtlasCloudWebhookVerifierOptions);
+    private refreshKeys;
+    /**
+     * Claim the one rotation refresh allowed per cooldown. Only refreshes an
+     * unknown key id provoked are counted: the cold-start load and a TTL
+     * expiry are this verifier's own doing and cannot be driven by a caller.
+     */
+    private claimRotationRefresh;
+    private keys;
+    verify(headers: Record<string, string | string[] | undefined>, body: Uint8Array): Promise<AtlasCloudWebhookVerificationResult>;
+}
+export interface AtlasCloudWebhookSink {
+    /** Report a terminal prediction. Returns false when nothing was waiting. */
+    resolve(predictionId: string, result: AtlasPollResult): boolean;
+    /** Report a failed prediction. Returns false when nothing was waiting. */
+    reject(predictionId: string, reason: string): boolean;
+}
+export interface AtlasCloudWebhookRouteOptions {
+    readonly sink?: AtlasCloudWebhookSink;
+    readonly verifier?: AtlasCloudWebhookVerifier;
+    readonly maxBodyBytes?: number;
+}
+export declare function createAtlasCloudWebhookRoute(options?: AtlasCloudWebhookRouteOptions): FastifyPluginAsync;
+export declare const atlasCloudWebhookRoute: FastifyPluginAsync;
+export default atlasCloudWebhookRoute;
+//# sourceMappingURL=atlascloud-webhook.d.ts.map

package/dist/routes/atlascloud-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atlascloud-webhook.d.ts","sourceRoot":"","sources":["../../src/routes/atlascloud-webhook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAkB,MAAM,SAAS,CAAC;AAClE,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAG9B,eAAO,MAAM,uBAAuB,sCAAsC,CAAC;AAC3E,eAAO,MAAM,2BAA2B,wDACe,CAAC;AACxD,eAAO,MAAM,2CAA2C,MAAM,CAAC;AAC/D,eAAO,MAAM,oCAAoC,QAAsB,CAAC;AACxE;;;;;;;GAOG;AACH,eAAO,MAAM,uCAAuC,QAAY,CAAC;AACjE,eAAO,MAAM,iCAAiC,QAAc,CAAC;AAmB7D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,mCAAmC,GAC3C;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAA;CAAE,GACjE;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EACX,gBAAgB,GAChB,gBAAgB,GAChB,mBAAmB,GACnB,iBAAiB,GACjB,aAAa,GACb,mBAAmB,GACnB,kBAAkB,CAAC;CACxB,CAAC;AAEN,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,SAAS,oBAAoB,EAAE,CAAC,CAAC;IACpE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAsGD;;;GAGG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiD;IAC3E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAS;IAC5C,OAAO,CAAC,UAAU,CAAgD;IAClE,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,qBAAqB,CAA4B;IACzD,OAAO,CAAC,cAAc,CAAyD;IAE/E,YAAY,OAAO,GAAE,gCAAqC,EASzD;YAEa,WAAW;IAczB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;YASd,IAAI;IAOZ,MAAM,CACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,mCAAmC,CAAC,CA8E9C;CACF;AAED,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC;IAChE,0EAA0E;IAC1E,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;CACvD;AAOD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAqCD,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,kBAAkB,CAkGpB;AAED,eAAO,MAAM,sBAAsB,oBAAiC,CAAC;eAEtD,sBAAsB"}