@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/routes/timelines.js

@@ -0,0 +1,191 @@
+/**
+ * Timeline zip download and upload —
+ *   `GET  /api/timelines/:id/export-zip`
+ *   `POST /api/timelines/import-zip`
+ *
+ * The web app reads and writes sequences over `/trpc/timeline.*`; these are the
+ * two non-tRPC doors, because one response is a binary archive and the other
+ * request is a multipart upload. Both go through `lib/timeline-bundle.ts`, so a
+ * bundle written here imports anywhere.
+ */
+import { Asset, TimelineSequence, timelineDocumentDurationMs } from "@nodetool-ai/models";
+import { bridge, streamedResponse } from "../lib/bridge.js";
+import { getUserId } from "../http-api.js";
+import { resolveAssetExportSource } from "../lib/asset-export.js";
+import { createAssetModelInterface } from "../lib/asset-model-interface.js";
+import { importTimelineBundle, writeTimelineBundle } from "../lib/timeline-bundle.js";
+import { streamZip } from "../lib/zip-stream.js";
+/** The `LOOSE_PROJECT_ID` value: documents that belong to no project. */
+const DEFAULT_PROJECT_ID = "default";
+function jsonError(status, detail) {
+    return new Response(JSON.stringify({ detail }), {
+        status,
+        headers: { "content-type": "application/json" }
+    });
+}
+/** The source for one asset the caller owns, or null when the row or object is gone. */
+async function fetchOwnedAsset(userId, assetId) {
+    const asset = (await Asset.get(assetId));
+    // Another owner's asset is an absence here, not a refusal: a clip can name an
+    // id that is not the caller's, and an export must not copy those bytes out.
+    if (!asset || asset.user_id !== userId) {
+        return null;
+    }
+    // A local file is streamed from disk; only a store with no local file
+    // hands over bytes.
+    const source = await resolveAssetExportSource(asset);
+    if (!source) {
+        return null;
+    }
+    return { source, name: asset.name, contentType: asset.content_type };
+}
+/** The bundle payload for a stored sequence: the wire shape minus db fields. */
+function toBundledTimeline(seq) {
+    const wire = seq.toTimelineSequence();
+    const bundled = {
+        name: wire.name,
+        fps: wire.fps,
+        width: wire.width,
+        height: wire.height,
+        durationMs: wire.durationMs,
+        tracks: wire.tracks,
+        clips: wire.clips,
+        markers: wire.markers,
+        transcript: wire.transcript ?? []
+    };
+    if (wire.workflowId) {
+        bundled.workflowId = wire.workflowId;
+    }
+    if (wire.scriptEnabled !== undefined) {
+        bundled.scriptEnabled = wire.scriptEnabled;
+    }
+    return bundled;
+}
+async function readImportUpload(request) {
+    const contentType = request.headers.get("content-type") ?? "";
+    if (!contentType.toLowerCase().includes("multipart/form-data")) {
+        return jsonError(400, "A multipart form with a `file` part is required");
+    }
+    let form;
+    try {
+        form = await request.formData();
+    }
+    catch {
+        return jsonError(400, "Invalid multipart form data");
+    }
+    const file = form.get("file");
+    if (!(file instanceof File)) {
+        return jsonError(400, "A timeline bundle file is required");
+    }
+    const projectId = form.get("project_id");
+    const name = form.get("name");
+    const upload = {
+        zipBytes: new Uint8Array(await file.arrayBuffer()),
+        projectId: typeof projectId === "string" && projectId !== ""
+            ? projectId
+            : DEFAULT_PROJECT_ID
+    };
+    if (typeof name === "string" && name !== "") {
+        upload.name = name;
+    }
+    return upload;
+}
+const timelinesRoutes = async (app, opts) => {
+    const { apiOptions } = opts;
+    const userIdOf = (request) => getUserId(request, apiOptions.userIdHeader ?? "x-user-id");
+    // Registered before the parametric route so `import-zip` is never read as a
+    // timeline id.
+    app.post("/api/timelines/import-zip", async (req, reply) => {
+        await bridge(req, reply, async (request) => {
+            const userId = userIdOf(request);
+            const upload = await readImportUpload(request);
+            if (upload instanceof Response) {
+                return upload;
+            }
+            let result;
+            try {
+                result = await importTimelineBundle(upload.zipBytes, {
+                    storeAsset: async ({ bytes, name, contentType }) => {
+                        const asset = await createAssetModelInterface({
+                            userId,
+                            name,
+                            contentType,
+                            content: bytes
+                        });
+                        return { assetId: asset.id };
+                    }
+                });
+            }
+            catch (error) {
+                return jsonError(400, `Invalid bundle: ${error instanceof Error ? error.message : String(error)}`);
+            }
+            const doc = {
+                tracks: result.timeline.tracks,
+                clips: result.timeline.clips,
+                markers: result.timeline.markers,
+                transcript: result.timeline.transcript ?? []
+            };
+            if (result.timeline.scriptEnabled !== undefined) {
+                doc.scriptEnabled = result.timeline.scriptEnabled;
+            }
+            // Import always creates a new sequence, like the workflow bundle and the
+            // list panel's Duplicate — it never overwrites an existing one.
+            const seq = new TimelineSequence({
+                user_id: userId,
+                project_id: upload.projectId,
+                name: upload.name ?? result.timeline.name,
+                fps: result.timeline.fps,
+                width: result.timeline.width,
+                height: result.timeline.height,
+                // Carried as written: a workflow id means something only on the
+                // exporting install, and rewriting it would invent a link that is not
+                // there. The manifest lists it under `foreign_refs` for the same reason.
+                workflow_id: result.timeline.workflowId ?? null
+            });
+            seq.fromDocument(doc);
+            seq.duration_ms = timelineDocumentDurationMs(doc);
+            await seq.save();
+            return new Response(JSON.stringify({
+                timeline: seq.toTimelineSequence(),
+                imported: result.imported.length,
+                missing: result.missing,
+                checksum_mismatches: result.checksumMismatches
+            }), { status: 200, headers: { "content-type": "application/json" } });
+        });
+    });
+    app.get("/api/timelines/:id/export-zip", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, async (request) => {
+            const userId = userIdOf(request);
+            const seq = await TimelineSequence.findById(id);
+            // Sequences are per-user, like boards and sketches: another owner's
+            // timeline is an absence, not a refusal.
+            if (!seq || seq.user_id !== userId) {
+                return jsonError(404, "Timeline not found");
+            }
+            const sequence = toBundledTimeline(seq);
+            // The archive streams as it is written, so neither an asset nor the
+            // zip is ever held in memory whole.
+            const body = streamZip(async (writer) => {
+                await writeTimelineBundle({
+                    sequence,
+                    fetchAsset: (assetId) => fetchOwnedAsset(userId, assetId)
+                }, writer);
+            });
+            const safe = (seq.name || "timeline").replace(/[^A-Za-z0-9._-]+/g, "_") ||
+                "timeline";
+            return streamedResponse(body, {
+                status: 200,
+                headers: {
+                    "content-type": "application/zip",
+                    "content-disposition": `attachment; filename="${safe}.zip"`,
+                    "cache-control": "no-store"
+                }
+            });
+        });
+        // A streamed body is still being sent when bridge returns.
+        return reply;
+    });
+};
+export default timelinesRoutes;
+//# sourceMappingURL=timelines.js.map

package/dist/routes/timelines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timelines.js","sourceRoot":"","sources":["../../src/routes/timelines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,0BAA0B,EAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAuB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EAGpB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAMjD,yEAAyE;AACzE,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAErC,SAAS,SAAS,CAAC,MAAc,EAAE,MAAc;IAC/C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;QAC9C,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,eAAe,CAC5B,MAAc,EACd,OAAe;IAEf,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAiB,CAAC;IACzD,8EAA8E;IAC9E,4EAA4E;IAC5E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;AACvE,CAAC;AAED,gFAAgF;AAChF,SAAS,iBAAiB,CAAC,GAAqB;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,kBAAkB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAoB;QAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AASD,KAAK,UAAU,gBAAgB,CAC7B,OAAgB;IAEhB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC/D,OAAO,SAAS,CAAC,GAAG,EAAE,iDAAiD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAiB;QAC3B,QAAQ,EAAE,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAClD,SAAS,EACP,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE;YAC/C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kBAAkB;KACzB,CAAC;IACF,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,eAAe,GAAqC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAU,EAAE,CAC5C,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,YAAY,IAAI,WAAW,CAAC,CAAC;IAE7D,4EAA4E;IAC5E,eAAe;IACf,GAAG,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,MAAM,YAAY,QAAQ,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,IAAI,MAAwD,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE;oBACnD,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;wBACjD,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC;4BAC5C,MAAM;4BACN,IAAI;4BACJ,WAAW;4BACX,OAAO,EAAE,KAAK;yBACf,CAAC,CAAC;wBACH,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;oBAC/B,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,SAAS,CACd,GAAG,EACH,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAqB;gBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC9B,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;gBAC5B,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;gBAChC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE;aAC7C,CAAC;YACF,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChD,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC;YACpD,CAAC;YACD,yEAAyE;YACzE,gEAAgE;YAChE,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC;gBAC/B,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,MAAM,CAAC,SAAS;gBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI;gBACzC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;gBACxB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK;gBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAC9B,gEAAgE;gBAChE,sEAAsE;gBACtE,yEAAyE;gBACzE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;aAChD,CAAC,CAAC;YACH,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACtB,GAAG,CAAC,WAAW,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAEjB,OAAO,IAAI,QAAQ,CACjB,IAAI,CAAC,SAAS,CAAC;gBACb,QAAQ,EAAE,GAAG,CAAC,kBAAkB,EAAE;gBAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;gBAChC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,mBAAmB,EAAE,MAAM,CAAC,kBAAkB;aAC/C,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CACjE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChD,oEAAoE;YACpE,yCAAyC;YACzC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBACnC,OAAO,SAAS,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;YACxC,oEAAoE;YACpE,oCAAoC;YACpC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACtC,MAAM,mBAAmB,CACvB;oBACE,QAAQ;oBACR,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC;iBAC1D,EACD,MAAM,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GACR,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC;gBAC1D,UAAU,CAAC;YACb,OAAO,gBAAgB,CAAC,IAAI,EAAE;gBAC5B,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,iBAAiB;oBACjC,qBAAqB,EAAE,yBAAyB,IAAI,OAAO;oBAC3D,eAAe,EAAE,UAAU;iBAC5B;aACF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,2DAA2D;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/workflows.d.ts

@@ -1,16 +1,13 @@
 /**
- * Workflows REST routes — minimal file-download remnant.
+ * Workflows REST routes — file downloads and JSON metadata used outside tRPC.
  *
- * All JSON-based workflow operations have been migrated to the tRPC router
- * at `/trpc/workflows.*`.
- *
- * Retained here (file downloads that can't travel through tRPC's JSON layer):
- *   GET  /api/workflows/:id/dsl-export   — TypeScript DSL source download
- *   POST /api/workflows/:id/gradio-export — 501 stub (Gradio not supported in standalone mode)
- *   GET  /api/workflows/examples/thumbnails/:filename — Example workflow thumbnail images
+ * The web app uses `/trpc/workflows.*`. These routes serve:
+ *   - Workflow list, creation, and detail JSON for SDKs and agents
+ *   - Public workflows, examples, tools, names (parity with `http-api` router)
+ *   - File endpoints that cannot use tRPC's JSON layer (DSL export, thumbnails)
  */
 import type { FastifyPluginAsync } from "fastify";
-import type { HttpApiOptions } from "../http-api.js";
+import { type HttpApiOptions } from "../http-api.js";
 interface RouteOptions {
     apiOptions: HttpApiOptions;
 }

package/dist/routes/workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAOrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAyBrD,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAGlD,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAmBhE,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAqKrD,CAAC;eAEa,eAAe"}

package/dist/routes/workflows.js

@@ -1,16 +1,15 @@
 /**
- * Workflows REST routes — minimal file-download remnant.
+ * Workflows REST routes — file downloads and JSON metadata used outside tRPC.
  *
- * All JSON-based workflow operations have been migrated to the tRPC router
- * at `/trpc/workflows.*`.
- *
- * Retained here (file downloads that can't travel through tRPC's JSON layer):
- *   GET  /api/workflows/:id/dsl-export   — TypeScript DSL source download
- *   POST /api/workflows/:id/gradio-export — 501 stub (Gradio not supported in standalone mode)
- *   GET  /api/workflows/examples/thumbnails/:filename — Example workflow thumbnail images
+ * The web app uses `/trpc/workflows.*`. These routes serve:
+ *   - Workflow list, creation, and detail JSON for SDKs and agents
+ *   - Public workflows, examples, tools, names (parity with `http-api` router)
+ *   - File endpoints that cannot use tRPC's JSON layer (DSL export, thumbnails)
  */
+import { Workflow } from "@nodetool-ai/models";
 import { bridge } from "../lib/bridge.js";
-import { handleWorkflowDslExport, handleWorkflowGradioExport, handleWorkflowExamplesThumbnail } from "../http-api.js";
+import { getUserId } from "../http-api.js";
+import { handleWorkflowById, handleWorkflowRun, handleDebugSessionRequest, handleWorkflowDslExport, handleWorkflowExportBundle, handleWorkflowsExportBundle, handleWorkflowImportBundle, handleWorkflowExamples, handleWorkflowExamplesSearch, handleWorkflowExamplesThumbnail, handleWorkflowExampleByName, handleWorkflowTools, handleWorkflowsRoot, handlePublicWorkflowById, handlePublicWorkflows } from "../http-api.js";
 const workflowsRoutes = async (app, opts) => {
     const { apiOptions } = opts;
     // Must be registered before /:id/dsl-export to avoid the literal "examples"
@@ -19,13 +18,103 @@ const workflowsRoutes = async (app, opts) => {
         const { filename } = req.params;
         await bridge(req, reply, (request) => handleWorkflowExamplesThumbnail(request, decodeURIComponent(filename), apiOptions));
     });
+    // -------------------------------------------------------------------------
+    // JSON workflow list/detail — kept on REST for public metadata (VVVV SDK,
+    // bootstrapping) alongside tRPC `workflows.*` for the web app.
+    // Order: longest/static paths before `/api/workflows/:id`.
+    // -------------------------------------------------------------------------
+    app.get("/api/workflows/examples/search", async (req, reply) => {
+        await bridge(req, reply, (request) => handleWorkflowExamplesSearch(request, apiOptions));
+    });
+    app.get("/api/workflows/examples", async (req, reply) => {
+        await bridge(req, reply, (request) => handleWorkflowExamples(request, apiOptions));
+    });
+    // One example workflow, graph included — the fetch counterpart of the list
+    // above, and what the `get_example_workflow` agent tool calls.
+    app.get("/api/workflows/examples/:package_name/:example_name", async (req, reply) => {
+        const { package_name, example_name } = req.params;
+        await bridge(req, reply, (request) => handleWorkflowExampleByName(request, package_name, example_name, apiOptions));
+    });
+    app.get("/api/workflows/names", async (req, reply) => {
+        await bridge(req, reply, async (request) => {
+            if (request.method !== "GET") {
+                return new Response(JSON.stringify({ detail: "Method not allowed" }), {
+                    status: 405,
+                    headers: { "content-type": "application/json" }
+                });
+            }
+            const userId = getUserId(request, apiOptions.userIdHeader ?? "x-user-id");
+            const [workflows] = await Workflow.paginate(userId, { limit: 1000 });
+            const names = {};
+            for (const wf of workflows)
+                names[wf.id] = wf.name;
+            return new Response(JSON.stringify(names), {
+                headers: { "content-type": "application/json" }
+            });
+        });
+    });
+    app.get("/api/workflows/tools", async (req, reply) => {
+        await bridge(req, reply, (request) => handleWorkflowTools(request, apiOptions));
+    });
+    // Bundle export/import (.nodetool). Static paths registered before
+    // `/api/workflows/:id` so they aren't captured as a workflow id.
+    app.post("/api/workflows/export-bundle", async (req, reply) => {
+        await bridge(req, reply, (request) => handleWorkflowsExportBundle(request, apiOptions));
+    });
+    app.post("/api/workflows/import-bundle", async (req, reply) => {
+        await bridge(req, reply, (request) => handleWorkflowImportBundle(request, apiOptions));
+    });
+    app.get("/api/workflows/public/:workflowId", async (req, reply) => {
+        const { workflowId } = req.params;
+        await bridge(req, reply, (request) => handlePublicWorkflowById(request, decodeURIComponent(workflowId)));
+    });
+    app.get("/api/workflows/public", async (req, reply) => {
+        await bridge(req, reply, (request) => handlePublicWorkflows(request));
+    });
+    // Single route: Fastify normalizes `/api/workflows` and `/api/workflows/` to one path.
+    app.route({
+        method: ["GET", "POST"],
+        url: "/api/workflows",
+        handler: async (req, reply) => {
+            await bridge(req, reply, (request) => handleWorkflowsRoot(request, apiOptions));
+        }
+    });
+    // Execute a saved workflow. The editor runs workflows over the WebSocket, so
+    // these two are the agent surface: `run_workflow`, `debug_workflow`,
+    // `start_background_job`, and the `nodetool debug` harness all POST here.
+    app.post("/api/workflows/:id/run", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, (request) => handleWorkflowRun(request, id, apiOptions));
+    });
+    app.post("/api/workflows/:id/debug", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, (request) => handleWorkflowRun(request, id, apiOptions, true));
+    });
     app.get("/api/workflows/:id/dsl-export", async (req, reply) => {
         const { id } = req.params;
         await bridge(req, reply, (request) => handleWorkflowDslExport(request, id, apiOptions));
     });
-    app.post("/api/workflows/:id/gradio-export", async (req, reply) => {
+    app.get("/api/workflows/:id/export-bundle", async (req, reply) => {
         const { id } = req.params;
-        await bridge(req, reply, (request) => handleWorkflowGradioExport(request, id, apiOptions));
+        await bridge(req, reply, (request) => handleWorkflowExportBundle(request, id, apiOptions));
+    });
+    // Interactive debug sessions — the escalation channel an agent polls after a
+    // `run`/`debug` call made with `interactive: true`.
+    app.get("/api/debug/sessions/:id", async (req, reply) => {
+        const { id } = req.params;
+        await bridge(req, reply, (request) => handleDebugSessionRequest(request, id, null, apiOptions));
+    });
+    app.post("/api/debug/sessions/:id/:action", async (req, reply) => {
+        const { id, action } = req.params;
+        await bridge(req, reply, (request) => handleDebugSessionRequest(request, id, action, apiOptions));
+    });
+    app.route({
+        method: ["GET", "PUT", "DELETE"],
+        url: "/api/workflows/:id",
+        handler: async (req, reply) => {
+            const { id } = req.params;
+            await bridge(req, reply, (request) => handleWorkflowById(request, id, apiOptions));
+        }
     });
 };
 export default workflowsRoutes;

package/dist/routes/workflows.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,OAAO,EACL,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,EAChC,MAAM,gBAAgB,CAAC;AAMxB,MAAM,eAAe,GAAqC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,4EAA4E;IAC5E,oCAAoC;IACpC,GAAG,CAAC,GAAG,CAAC,8CAA8C,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAA8B,CAAC;QACxD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CACnF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,uBAAuB,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CACpD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"workflows.js","sourceRoot":"","sources":["../../src/routes/workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAuB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,EAC3B,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,+BAA+B,EAC/B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACtB,MAAM,gBAAgB,CAAC;AAMxB,MAAM,eAAe,GAAqC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;IAC5E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5B,4EAA4E;IAC5E,oCAAoC;IACpC,GAAG,CAAC,GAAG,CAAC,8CAA8C,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC3E,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAA8B,CAAC;QACxD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,+BAA+B,CAAC,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CACnF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0EAA0E;IAC1E,+DAA+D;IAC/D,2DAA2D;IAC3D,4EAA4E;IAE5E,GAAG,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7D,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,4BAA4B,CAAC,OAAO,EAAE,UAAU,CAAC,CAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,+DAA+D;IAC/D,GAAG,CAAC,GAAG,CACL,qDAAqD,EACrD,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAG1C,CAAC;QACF,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,2BAA2B,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,CAC7E,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACzC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC7B,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,EAAE;oBACpE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,GAAG,SAAS,CACtB,OAAO,EACP,UAAU,CAAC,YAAY,IAAI,WAAW,CACvC,CAAC;YACF,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACrE,MAAM,KAAK,GAA2B,EAAE,CAAC;YACzC,KAAK,MAAM,EAAE,IAAI,SAAS;gBAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;gBACzC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACnD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CACzC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,iEAAiE;IACjE,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,2BAA2B,CAAC,OAAO,EAAE,UAAU,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,0BAA0B,CAAC,OAAO,EAAE,UAAU,CAAC,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,mCAAmC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,MAAgC,CAAC;QAC5D,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAClE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACpD,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,uFAAuF;IACvF,GAAG,CAAC,KAAK,CAAC;QACR,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,GAAG,EAAE,gBAAgB;QACrB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,CACzC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,6EAA6E;IAC7E,qEAAqE;IACrE,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,iBAAiB,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,iBAAiB,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,uBAAuB,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CACjD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CACpD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,oDAAoD;IACpD,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,yBAAyB,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CACzD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAwC,CAAC;QACpE,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,yBAAyB,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAC3D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,KAAK,CAAC;QACR,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC;QAChC,GAAG,EAAE,oBAAoB;QACzB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YAC5B,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;YAC5C,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,kBAAkB,CAAC,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,CAC5C,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,eAAe,eAAe,CAAC"}

package/dist/routes/workspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/routes/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAerD,CAAC;AAEF,eAAe,eAAe,CAAC"}
+{"version":3,"file":"workspace.d.ts","sourceRoot":"","sources":["../../src/routes/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU,YAAY;IACpB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,QAAA,MAAM,eAAe,EAAE,kBAAkB,CAAC,YAAY,CAerD,CAAC;eAEa,eAAe"}

package/dist/run-supervisor.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Builds the `SupervisorHandle` a supervised run gets, for every server-side
+ * entry point that starts one (the websocket runner, the headless/trigger
+ * runner).
+ *
+ * Supervision is opt-in and stays opt-in: this returns `null` for anything
+ * short of an explicit `supervise: true` plus a resolvable model, and a run
+ * without a handle constructs no escalation at all. A misconfiguration
+ * therefore degrades to today's behavior rather than failing the run — the
+ * fail-closed rule the whole design follows.
+ *
+ * See docs/workflow-supervisor-design.md §7 entry point 4.
+ */
+import { type SupervisorHandle } from "@nodetool-ai/kernel";
+import type { SupervisorRunOptions } from "@nodetool-ai/protocol";
+import { type ProcessingContext } from "@nodetool-ai/runtime";
+interface CreateRunSupervisorOptions {
+    /** The request's flag. Anything but `true` yields `null`. */
+    supervise?: boolean | undefined;
+    /** Per-request supervisor configuration. */
+    supervisor?: SupervisorRunOptions | null | undefined;
+    /** The run's context — used for secrets, memory, and tool execution. */
+    context: ProcessingContext;
+    /** Server-configured fallbacks when the request names neither. */
+    defaultProvider?: string | undefined;
+    defaultModel?: string | undefined;
+}
+export declare function createRunSupervisor(options: CreateRunSupervisorOptions): Promise<SupervisorHandle | null>;
+export {};
+//# sourceMappingURL=run-supervisor.d.ts.map

package/dist/run-supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-supervisor.d.ts","sourceRoot":"","sources":["../src/run-supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAe,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAI3E,UAAU,0BAA0B;IAClC,6DAA6D;IAC7D,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,4CAA4C;IAC5C,UAAU,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,CAAC;IACrD,wEAAwE;IACxE,OAAO,EAAE,iBAAiB,CAAC;IAC3B,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAuBD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAwDlC"}

package/dist/run-supervisor.js

@@ -0,0 +1,86 @@
+/**
+ * Builds the `SupervisorHandle` a supervised run gets, for every server-side
+ * entry point that starts one (the websocket runner, the headless/trigger
+ * runner).
+ *
+ * Supervision is opt-in and stays opt-in: this returns `null` for anything
+ * short of an explicit `supervise: true` plus a resolvable model, and a run
+ * without a handle constructs no escalation at all. A misconfiguration
+ * therefore degrades to today's behavior rather than failing the run — the
+ * fail-closed rule the whole design follows.
+ *
+ * See docs/workflow-supervisor-design.md §7 entry point 4.
+ */
+import { createLogger } from "@nodetool-ai/config";
+import { SupervisorAgent } from "@nodetool-ai/agents";
+import { BoundedHandle } from "@nodetool-ai/kernel";
+import { getProvider } from "@nodetool-ai/runtime";
+const log = createLogger("nodetool.websocket.run-supervisor");
+/**
+ * Resolve the supervising model. Request first, then the caller's configured
+ * defaults, then the environment — the last exists for hosts that have no
+ * per-connection defaults at all (the trigger dispatcher's headless runs).
+ */
+function resolveModel(options) {
+    const provider = options.supervisor?.provider ??
+        options.defaultProvider ??
+        process.env["NODETOOL_SUPERVISOR_PROVIDER"];
+    const model = options.supervisor?.model ??
+        options.defaultModel ??
+        process.env["NODETOOL_SUPERVISOR_MODEL"];
+    if (!provider || !model)
+        return null;
+    return { provider, model };
+}
+export async function createRunSupervisor(options) {
+    if (options.supervise !== true)
+        return null;
+    const selection = resolveModel(options);
+    if (!selection) {
+        log.warn("Supervision requested but no supervisor model is configured — running unsupervised");
+        return null;
+    }
+    // A dedicated provider instance, not the one the run's nodes resolve
+    // through the context: per-turn spend is reconciled from the provider's own
+    // running cost, so a second caller on the same instance would corrupt the
+    // supervisor's dollar cap.
+    let provider;
+    try {
+        provider = await getProvider(selection.provider, (key) => options.context.getSecret(key));
+    }
+    catch (error) {
+        log.warn("Supervisor provider unavailable — running unsupervised", {
+            provider: selection.provider,
+            error: error instanceof Error ? error.message : String(error)
+        });
+        return null;
+    }
+    const agentOptions = {
+        provider,
+        model: selection.model,
+        // The supervisor shares the run's memory (its `supervisor:` keys belong to
+        // the run) but not its listeners: the decision's own provider traffic is
+        // not the run's message stream. The kernel emits the escalation and the
+        // verdict on the run's context regardless.
+        context: options.context.copy({
+            shareMemory: true,
+            inheritMessageListeners: false
+        })
+    };
+    if (options.supervisor?.cost_cap_usd !== undefined) {
+        agentOptions.maxCostUsd = options.supervisor.cost_cap_usd;
+    }
+    const agent = new SupervisorAgent(agentOptions);
+    const bounds = {};
+    if (options.supervisor?.max_decisions !== undefined) {
+        bounds.maxDecisions = options.supervisor.max_decisions;
+    }
+    if (options.supervisor?.max_retries_per_node !== undefined) {
+        bounds.maxRetriesPerNode = options.supervisor.max_retries_per_node;
+    }
+    if (options.supervisor?.decision_timeout_ms !== undefined) {
+        bounds.decisionTimeoutMs = options.supervisor.decision_timeout_ms;
+    }
+    return new BoundedHandle(agent, bounds);
+}
+//# sourceMappingURL=run-supervisor.js.map

package/dist/run-supervisor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-supervisor.js","sourceRoot":"","sources":["../src/run-supervisor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAyB,MAAM,qBAAqB,CAAC;AAE3E,OAAO,EAAE,WAAW,EAA0B,MAAM,sBAAsB,CAAC;AAE3E,MAAM,GAAG,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;AAc9D;;;;GAIG;AACH,SAAS,YAAY,CAAC,OAAmC;IAIvD,MAAM,QAAQ,GACZ,OAAO,CAAC,UAAU,EAAE,QAAQ;QAC5B,OAAO,CAAC,eAAe;QACvB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC9C,MAAM,KAAK,GACT,OAAO,CAAC,UAAU,EAAE,KAAK;QACzB,OAAO,CAAC,YAAY;QACpB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAmC;IAEnC,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CACN,oFAAoF,CACrF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,4EAA4E;IAC5E,0EAA0E;IAC1E,2BAA2B;IAC3B,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CACvD,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAC/B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,wDAAwD,EAAE;YACjE,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAqD;QACrE,QAAQ;QACR,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,2EAA2E;QAC3E,yEAAyE;QACzE,wEAAwE;QACxE,2CAA2C;QAC3C,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5B,WAAW,EAAE,IAAI;YACjB,uBAAuB,EAAE,KAAK;SAC/B,CAAC;KACH,CAAC;IACF,IAAI,OAAO,CAAC,UAAU,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QACnD,YAAY,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAmD,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,UAAU,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC1D,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/sandbox-catalog.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The server's sandbox module catalog.
+ *
+ * Built where packs are discovered, installed as this process's catalog default
+ * so every {@link ProcessingContext} the kernel creates resolves through the
+ * same instance, and kept here for diagnostics. These statuses are their own
+ * set — a sandbox module that fails discovery says nothing about whether the
+ * pack's *nodes* loaded, which is what `pack-snapshot.ts` reports.
+ *
+ * The server is the async host, so this is also where npm modules compile: a
+ * pack's `npm` declaration becomes a bundled, scanned, probed guest module
+ * before the catalog is built. The compiler is imported lazily and its absence
+ * is a diagnostic, not a failure — an npm module then stays `pending-compile`,
+ * exactly as it does before anything has compiled it.
+ */
+import { type SandboxCatalogHost } from "@nodetool-ai/node-sdk";
+import { type SandboxModuleCatalog } from "@nodetool-ai/runtime";
+import type { SandboxModuleStatus } from "@nodetool-ai/protocol";
+/**
+ * Rebuild the catalog from the installed packs and make it the process default.
+ * Runs already in flight keep the catalog instance they resolved against.
+ */
+export declare function refreshSandboxCatalog(searchPaths?: readonly string[]): Promise<SandboxCatalogHost>;
+/** The catalog in force, or null before the host built one. */
+export declare function getSandboxCatalog(): SandboxModuleCatalog | null;
+/** Every sandbox-module diagnostic from the last discovery. */
+export declare function getSandboxCatalogDiagnostics(): readonly SandboxModuleStatus[];
+//# sourceMappingURL=sandbox-catalog.d.ts.map

package/dist/sandbox-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-catalog.d.ts","sourceRoot":"","sources":["../src/sandbox-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAEL,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAKjE;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,GAC9B,OAAO,CAAC,kBAAkB,CAAC,CAK7B;AAED,+DAA+D;AAC/D,wBAAgB,iBAAiB,IAAI,oBAAoB,GAAG,IAAI,CAE/D;AAED,+DAA+D;AAC/D,wBAAgB,4BAA4B,IAAI,SAAS,mBAAmB,EAAE,CAG7E"}

package/dist/sandbox-catalog.js

@@ -0,0 +1,74 @@
+/**
+ * The server's sandbox module catalog.
+ *
+ * Built where packs are discovered, installed as this process's catalog default
+ * so every {@link ProcessingContext} the kernel creates resolves through the
+ * same instance, and kept here for diagnostics. These statuses are their own
+ * set — a sandbox module that fails discovery says nothing about whether the
+ * pack's *nodes* loaded, which is what `pack-snapshot.ts` reports.
+ *
+ * The server is the async host, so this is also where npm modules compile: a
+ * pack's `npm` declaration becomes a bundled, scanned, probed guest module
+ * before the catalog is built. The compiler is imported lazily and its absence
+ * is a diagnostic, not a failure — an npm module then stays `pending-compile`,
+ * exactly as it does before anything has compiled it.
+ */
+import { discoverSandboxCatalog } from "@nodetool-ai/node-sdk";
+import { setProcessSandboxModuleCatalog } from "@nodetool-ai/runtime";
+let host = null;
+let compileFailure = null;
+/**
+ * Rebuild the catalog from the installed packs and make it the process default.
+ * Runs already in flight keep the catalog instance they resolved against.
+ */
+export async function refreshSandboxCatalog(searchPaths) {
+    compileFailure = null;
+    host = (await compileAndDiscover(searchPaths)) ?? discover(searchPaths);
+    setProcessSandboxModuleCatalog(host.catalog);
+    return host;
+}
+/** The catalog in force, or null before the host built one. */
+export function getSandboxCatalog() {
+    return host?.catalog ?? null;
+}
+/** Every sandbox-module diagnostic from the last discovery. */
+export function getSandboxCatalogDiagnostics() {
+    const diagnostics = host?.catalog.diagnostics() ?? [];
+    return compileFailure === null ? diagnostics : [...diagnostics, compileFailure];
+}
+async function compileAndDiscover(searchPaths) {
+    let compileSandboxCatalog;
+    try {
+        ({ compileSandboxCatalog } = (await import("@nodetool-ai/sandbox-compiler")));
+    }
+    catch (error) {
+        compileFailure = {
+            packName: "@nodetool-ai/sandbox-compiler",
+            status: "warning",
+            code: "compiler-unavailable",
+            message: `The npm module compiler is unavailable, so npm-backed sandbox modules stay uncompiled: ${message(error)}`
+        };
+        return undefined;
+    }
+    try {
+        return await compileSandboxCatalog(searchPaths === undefined ? {} : { searchPaths });
+    }
+    catch (error) {
+        compileFailure = {
+            packName: "@nodetool-ai/sandbox-compiler",
+            status: "warning",
+            code: "compile-failed",
+            message: `Compiling npm sandbox modules failed, so they stay uncompiled: ${message(error)}`
+        };
+        return undefined;
+    }
+}
+function discover(searchPaths) {
+    return searchPaths === undefined
+        ? discoverSandboxCatalog()
+        : discoverSandboxCatalog(searchPaths);
+}
+function message(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=sandbox-catalog.js.map

package/dist/sandbox-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-catalog.js","sourceRoot":"","sources":["../src/sandbox-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,sBAAsB,EAEvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAE/B,MAAM,sBAAsB,CAAC;AAG9B,IAAI,IAAI,GAA8B,IAAI,CAAC;AAC3C,IAAI,cAAc,GAA+B,IAAI,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAA+B;IAE/B,cAAc,GAAG,IAAI,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,4BAA4B;IAC1C,MAAM,WAAW,GAAG,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACtD,OAAO,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,EAAE,cAAc,CAAC,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,WAA0C;IAE1C,IAAI,qBAE6B,CAAC;IAClC,IAAI,CAAC;QACH,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,MAAM,MAAM,CACxC,+BAA+B,CAChC,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG;YACf,QAAQ,EAAE,+BAA+B;YACzC,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,0FAA0F,OAAO,CAAC,KAAK,CAAC,EAAE;SACpH,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,qBAAqB,CAChC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CACjD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG;YACf,QAAQ,EAAE,+BAA+B;YACzC,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,kEAAkE,OAAO,CAAC,KAAK,CAAC,EAAE;SAC5F,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,WAA0C;IAC1D,OAAO,WAAW,KAAK,SAAS;QAC9B,CAAC,CAAC,sBAAsB,EAAE;QAC1B,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}