@orka-js/express 1.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Orka Team
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.cjs

@@ -0,0 +1,129 @@
+'use strict';
+
+var express = require('express');
+
+// src/middleware.ts
+var ORKA_VERSION = "1.0.0";
+async function checkAuth(config, req) {
+  if (!config.auth) return true;
+  try {
+    return await config.auth(req);
+  } catch {
+    return false;
+  }
+}
+function setCors(res, origin) {
+  if (origin === false) return;
+  res.setHeader("Access-Control-Allow-Origin", origin);
+  res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+  res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+}
+function orkaMiddleware(config) {
+  const router = express.Router();
+  const corsOrigin = config.cors !== void 0 ? config.cors : "*";
+  router.options("*", (_req, res) => {
+    setCors(res, corsOrigin);
+    res.status(204).end();
+  });
+  router.get("/", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agents = Object.entries(config.agents).map(([name, agent]) => ({
+      name,
+      goal: agent.goal,
+      streaming: typeof agent.runStream === "function"
+    }));
+    res.json({ agents, version: ORKA_VERSION });
+  });
+  router.get("/:agent", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agent = config.agents[req.params.agent];
+    if (!agent) {
+      res.status(404).json({ error: `Agent "${req.params.agent}" not found`, available: Object.keys(config.agents) });
+      return;
+    }
+    res.json({
+      name: req.params.agent,
+      goal: agent.goal,
+      streaming: typeof agent.runStream === "function"
+    });
+  });
+  router.post("/:agent", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agent = config.agents[req.params.agent];
+    if (!agent) {
+      res.status(404).json({ error: `Agent "${req.params.agent}" not found` });
+      return;
+    }
+    const body = req.body;
+    if (!body?.input) {
+      res.status(400).json({ error: 'Request body must include "input" field' });
+      return;
+    }
+    try {
+      const result = await agent.run(body.input);
+      res.json({
+        output: result.output,
+        toolsUsed: result.toolsUsed,
+        totalLatencyMs: result.totalLatencyMs,
+        totalTokens: result.totalTokens,
+        metadata: result.metadata
+      });
+    } catch (err) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+  router.post("/:agent/stream", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agent = config.agents[req.params.agent];
+    if (!agent) {
+      res.status(404).json({ error: `Agent "${req.params.agent}" not found` });
+      return;
+    }
+    if (typeof agent.runStream !== "function") {
+      res.status(400).json({ error: `Agent "${req.params.agent}" does not support streaming` });
+      return;
+    }
+    const body = req.body;
+    if (!body?.input) {
+      res.status(400).json({ error: 'Request body must include "input" field' });
+      return;
+    }
+    res.setHeader("Content-Type", "text/event-stream");
+    res.setHeader("Cache-Control", "no-cache");
+    res.setHeader("Connection", "keep-alive");
+    res.setHeader("X-Accel-Buffering", "no");
+    const send = (data) => res.write(`data: ${JSON.stringify(data)}
+
+`);
+    try {
+      for await (const event of agent.runStream(body.input)) {
+        send(event);
+        if (event.type === "done" || event.type === "error") break;
+      }
+    } catch (err) {
+      send({ type: "error", message: err.message });
+    }
+    res.end();
+  });
+  return router;
+}
+
+exports.orkaMiddleware = orkaMiddleware;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"names":["Router"],"mappings":";;;;;AAMA,IAAM,YAAA,GAAe,OAAA;AAErB,eAAe,SAAA,CAAU,QAA2B,GAAA,EAAgC;AAClF,EAAA,IAAI,CAAC,MAAA,CAAO,IAAA,EAAM,OAAO,IAAA;AACzB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,OAAA,CAAQ,KAAe,MAAA,EAA8B;AAC5D,EAAA,IAAI,WAAW,KAAA,EAAO;AACtB,EAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,MAAM,CAAA;AACnD,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAClE,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,6BAA6B,CAAA;AAC7E;AAKO,SAAS,eAAe,MAAA,EAAsD;AACnF,EAAA,MAAM,SAASA,cAAA,EAAO;AACtB,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,IAAA,KAAS,MAAA,GAAY,OAAO,IAAA,GAAO,GAAA;AAE7D,EAAA,MAAA,CAAO,OAAA,CAAQ,GAAA,EAAK,CAAC,IAAA,EAAM,GAAA,KAAQ;AACjC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,EAAI;AAAA,EACtB,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,GAAA,EAAK,GAAA,KAAQ;AAClC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,KAAK,CAAA,MAAO;AAAA,MACnE,IAAA;AAAA,MACA,MAAO,KAAA,CAAoB,IAAA;AAAA,MAC3B,SAAA,EAAW,OAAQ,KAAA,CAA0B,SAAA,KAAc;AAAA,KAC7D,CAAE,CAAA;AACF,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,OAAA,EAAS,cAAc,CAAA;AAAA,EAC5C,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,OAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,eAAe,SAAA,EAAW,MAAA,CAAO,KAAK,MAAA,CAAO,MAAM,GAAG,CAAA;AAC9G,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,IAAA,CAAK;AAAA,MACP,IAAA,EAAM,IAAI,MAAA,CAAO,KAAA;AAAA,MACjB,MAAO,KAAA,CAAoB,IAAA;AAAA,MAC3B,SAAA,EAAW,OAAQ,KAAA,CAA0B,SAAA,KAAc;AAAA,KAC5D,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,OAAO,GAAA,EAAK,GAAA,KAAQ;AACzC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,WAAA,CAAA,EAAe,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,IAAA,IAAI,CAAC,MAAM,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2CAA2C,CAAA;AAAG,MAAA;AAAA,IAAQ;AACxG,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,CAAI,KAAK,KAAK,CAAA;AACzC,MAAA,GAAA,CAAI,IAAA,CAAK;AAAA,QACP,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,WAAW,MAAA,CAAO,SAAA;AAAA,QAClB,gBAAgB,MAAA,CAAO,cAAA;AAAA,QACvB,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,UAAU,MAAA,CAAO;AAAA,OAClB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAQ,GAAA,CAAc,SAAS,CAAA;AAAA,IACxD;AAAA,EACF,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,IAAA,CAAK,gBAAA,EAAkB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,WAAA,CAAA,EAAe,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,IAAI,OAAO,KAAA,CAAM,SAAA,KAAc,UAAA,EAAY;AACzC,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,4BAAA,CAAA,EAAgC,CAAA;AACxF,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,IAAA,IAAI,CAAC,MAAM,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2CAA2C,CAAA;AAAG,MAAA;AAAA,IAAQ;AAExG,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,IAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,IAAA,GAAA,CAAI,SAAA,CAAU,qBAAqB,IAAI,CAAA;AAEvC,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,KAAkB,GAAA,CAAI,MAAM,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC;;AAAA,CAAM,CAAA;AAE7E,IAAA,IAAI;AACF,MAAA,WAAA,MAAiB,KAAA,IAAS,KAAA,CAAM,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA,EAAG;AACrD,QAAA,IAAA,CAAK,KAAK,CAAA;AACV,QAAA,IAAI,KAAA,CAAM,IAAA,KAAS,MAAA,IAAU,KAAA,CAAM,SAAS,OAAA,EAAS;AAAA,MACvD;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAU,GAAA,CAAc,SAAS,CAAA;AAAA,IACzD;AACA,IAAA,GAAA,CAAI,GAAA,EAAI;AAAA,EACV,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT","file":"index.cjs","sourcesContent":["import { Router } from 'express';\nimport type { Request, Response } from 'express';\nimport type { BaseAgent } from '@orka-js/agent';\nimport type { LLMStreamEvent } from '@orka-js/core';\nimport type { OrkaExpressConfig, AgentRunRequest } from './types.js';\n\nconst ORKA_VERSION = '1.0.0';\n\nasync function checkAuth(config: OrkaExpressConfig, req: Request): Promise<boolean> {\n  if (!config.auth) return true;\n  try {\n    return await config.auth(req);\n  } catch {\n    return false;\n  }\n}\n\nfunction setCors(res: Response, origin: string | false): void {\n  if (origin === false) return;\n  res.setHeader('Access-Control-Allow-Origin', origin);\n  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n  res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');\n}\n\ntype StreamableAgent = BaseAgent & { runStream?: (input: string) => AsyncIterable<LLMStreamEvent> };\ntype GoalAgent = BaseAgent & { goal?: string };\n\nexport function orkaMiddleware(config: OrkaExpressConfig): ReturnType<typeof Router> {\n  const router = Router();\n  const corsOrigin = config.cors !== undefined ? config.cors : '*';\n\n  router.options('*', (_req, res) => {\n    setCors(res, corsOrigin);\n    res.status(204).end();\n  });\n\n  // GET / — list agents\n  router.get('/', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agents = Object.entries(config.agents).map(([name, agent]) => ({\n      name,\n      goal: (agent as GoalAgent).goal,\n      streaming: typeof (agent as StreamableAgent).runStream === 'function',\n    }));\n    res.json({ agents, version: ORKA_VERSION });\n  });\n\n  // GET /:agent — agent info\n  router.get('/:agent', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agent = config.agents[req.params.agent];\n    if (!agent) {\n      res.status(404).json({ error: `Agent \"${req.params.agent}\" not found`, available: Object.keys(config.agents) });\n      return;\n    }\n    res.json({\n      name: req.params.agent,\n      goal: (agent as GoalAgent).goal,\n      streaming: typeof (agent as StreamableAgent).runStream === 'function',\n    });\n  });\n\n  // POST /:agent — run agent (non-streaming)\n  router.post('/:agent', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agent = config.agents[req.params.agent];\n    if (!agent) { res.status(404).json({ error: `Agent \"${req.params.agent}\" not found` }); return; }\n    const body = req.body as AgentRunRequest;\n    if (!body?.input) { res.status(400).json({ error: 'Request body must include \"input\" field' }); return; }\n    try {\n      const result = await agent.run(body.input);\n      res.json({\n        output: result.output,\n        toolsUsed: result.toolsUsed,\n        totalLatencyMs: result.totalLatencyMs,\n        totalTokens: result.totalTokens,\n        metadata: result.metadata,\n      });\n    } catch (err) {\n      res.status(500).json({ error: (err as Error).message });\n    }\n  });\n\n  // POST /:agent/stream — SSE streaming\n  router.post('/:agent/stream', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agent = config.agents[req.params.agent] as StreamableAgent | undefined;\n    if (!agent) { res.status(404).json({ error: `Agent \"${req.params.agent}\" not found` }); return; }\n    if (typeof agent.runStream !== 'function') {\n      res.status(400).json({ error: `Agent \"${req.params.agent}\" does not support streaming` });\n      return;\n    }\n    const body = req.body as AgentRunRequest;\n    if (!body?.input) { res.status(400).json({ error: 'Request body must include \"input\" field' }); return; }\n\n    res.setHeader('Content-Type', 'text/event-stream');\n    res.setHeader('Cache-Control', 'no-cache');\n    res.setHeader('Connection', 'keep-alive');\n    res.setHeader('X-Accel-Buffering', 'no');\n\n    const send = (data: unknown) => res.write(`data: ${JSON.stringify(data)}\\n\\n`);\n\n    try {\n      for await (const event of agent.runStream(body.input)) {\n        send(event);\n        if (event.type === 'done' || event.type === 'error') break;\n      }\n    } catch (err) {\n      send({ type: 'error', message: (err as Error).message });\n    }\n    res.end();\n  });\n\n  return router;\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,26 @@
+import { Request, Router } from 'express';
+import { BaseAgent } from '@orka-js/agent';
+
+interface OrkaExpressConfig {
+    /** Map of agent name → agent instance */
+    agents: Record<string, BaseAgent>;
+    /** Optional auth function — return false to reject with 401 */
+    auth?: (req: Request) => boolean | Promise<boolean>;
+    /** CORS origin header value — default '*', set false to disable */
+    cors?: string | false;
+}
+interface AgentRunRequest {
+    input: string;
+    metadata?: Record<string, unknown>;
+}
+interface AgentRunResponse {
+    output: string;
+    toolsUsed: string[];
+    totalLatencyMs: number;
+    totalTokens: number;
+    metadata: Record<string, unknown>;
+}
+
+declare function orkaMiddleware(config: OrkaExpressConfig): ReturnType<typeof Router>;
+
+export { type AgentRunRequest, type AgentRunResponse, type OrkaExpressConfig, orkaMiddleware };

package/dist/index.d.ts

@@ -0,0 +1,26 @@
+import { Request, Router } from 'express';
+import { BaseAgent } from '@orka-js/agent';
+
+interface OrkaExpressConfig {
+    /** Map of agent name → agent instance */
+    agents: Record<string, BaseAgent>;
+    /** Optional auth function — return false to reject with 401 */
+    auth?: (req: Request) => boolean | Promise<boolean>;
+    /** CORS origin header value — default '*', set false to disable */
+    cors?: string | false;
+}
+interface AgentRunRequest {
+    input: string;
+    metadata?: Record<string, unknown>;
+}
+interface AgentRunResponse {
+    output: string;
+    toolsUsed: string[];
+    totalLatencyMs: number;
+    totalTokens: number;
+    metadata: Record<string, unknown>;
+}
+
+declare function orkaMiddleware(config: OrkaExpressConfig): ReturnType<typeof Router>;
+
+export { type AgentRunRequest, type AgentRunResponse, type OrkaExpressConfig, orkaMiddleware };

package/dist/index.js

@@ -0,0 +1,127 @@
+import { Router } from 'express';
+
+// src/middleware.ts
+var ORKA_VERSION = "1.0.0";
+async function checkAuth(config, req) {
+  if (!config.auth) return true;
+  try {
+    return await config.auth(req);
+  } catch {
+    return false;
+  }
+}
+function setCors(res, origin) {
+  if (origin === false) return;
+  res.setHeader("Access-Control-Allow-Origin", origin);
+  res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
+  res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization");
+}
+function orkaMiddleware(config) {
+  const router = Router();
+  const corsOrigin = config.cors !== void 0 ? config.cors : "*";
+  router.options("*", (_req, res) => {
+    setCors(res, corsOrigin);
+    res.status(204).end();
+  });
+  router.get("/", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agents = Object.entries(config.agents).map(([name, agent]) => ({
+      name,
+      goal: agent.goal,
+      streaming: typeof agent.runStream === "function"
+    }));
+    res.json({ agents, version: ORKA_VERSION });
+  });
+  router.get("/:agent", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agent = config.agents[req.params.agent];
+    if (!agent) {
+      res.status(404).json({ error: `Agent "${req.params.agent}" not found`, available: Object.keys(config.agents) });
+      return;
+    }
+    res.json({
+      name: req.params.agent,
+      goal: agent.goal,
+      streaming: typeof agent.runStream === "function"
+    });
+  });
+  router.post("/:agent", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agent = config.agents[req.params.agent];
+    if (!agent) {
+      res.status(404).json({ error: `Agent "${req.params.agent}" not found` });
+      return;
+    }
+    const body = req.body;
+    if (!body?.input) {
+      res.status(400).json({ error: 'Request body must include "input" field' });
+      return;
+    }
+    try {
+      const result = await agent.run(body.input);
+      res.json({
+        output: result.output,
+        toolsUsed: result.toolsUsed,
+        totalLatencyMs: result.totalLatencyMs,
+        totalTokens: result.totalTokens,
+        metadata: result.metadata
+      });
+    } catch (err) {
+      res.status(500).json({ error: err.message });
+    }
+  });
+  router.post("/:agent/stream", async (req, res) => {
+    setCors(res, corsOrigin);
+    if (!await checkAuth(config, req)) {
+      res.status(401).json({ error: "Unauthorized" });
+      return;
+    }
+    const agent = config.agents[req.params.agent];
+    if (!agent) {
+      res.status(404).json({ error: `Agent "${req.params.agent}" not found` });
+      return;
+    }
+    if (typeof agent.runStream !== "function") {
+      res.status(400).json({ error: `Agent "${req.params.agent}" does not support streaming` });
+      return;
+    }
+    const body = req.body;
+    if (!body?.input) {
+      res.status(400).json({ error: 'Request body must include "input" field' });
+      return;
+    }
+    res.setHeader("Content-Type", "text/event-stream");
+    res.setHeader("Cache-Control", "no-cache");
+    res.setHeader("Connection", "keep-alive");
+    res.setHeader("X-Accel-Buffering", "no");
+    const send = (data) => res.write(`data: ${JSON.stringify(data)}
+
+`);
+    try {
+      for await (const event of agent.runStream(body.input)) {
+        send(event);
+        if (event.type === "done" || event.type === "error") break;
+      }
+    } catch (err) {
+      send({ type: "error", message: err.message });
+    }
+    res.end();
+  });
+  return router;
+}
+
+export { orkaMiddleware };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/middleware.ts"],"names":[],"mappings":";;;AAMA,IAAM,YAAA,GAAe,OAAA;AAErB,eAAe,SAAA,CAAU,QAA2B,GAAA,EAAgC;AAClF,EAAA,IAAI,CAAC,MAAA,CAAO,IAAA,EAAM,OAAO,IAAA;AACzB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA;AAAA,EAC9B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAEA,SAAS,OAAA,CAAQ,KAAe,MAAA,EAA8B;AAC5D,EAAA,IAAI,WAAW,KAAA,EAAO;AACtB,EAAA,GAAA,CAAI,SAAA,CAAU,+BAA+B,MAAM,CAAA;AACnD,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,oBAAoB,CAAA;AAClE,EAAA,GAAA,CAAI,SAAA,CAAU,gCAAgC,6BAA6B,CAAA;AAC7E;AAKO,SAAS,eAAe,MAAA,EAAsD;AACnF,EAAA,MAAM,SAAS,MAAA,EAAO;AACtB,EAAA,MAAM,UAAA,GAAa,MAAA,CAAO,IAAA,KAAS,MAAA,GAAY,OAAO,IAAA,GAAO,GAAA;AAE7D,EAAA,MAAA,CAAO,OAAA,CAAQ,GAAA,EAAK,CAAC,IAAA,EAAM,GAAA,KAAQ;AACjC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,GAAA,EAAI;AAAA,EACtB,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,GAAA,EAAK,GAAA,KAAQ;AAClC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,CAAE,GAAA,CAAI,CAAC,CAAC,IAAA,EAAM,KAAK,CAAA,MAAO;AAAA,MACnE,IAAA;AAAA,MACA,MAAO,KAAA,CAAoB,IAAA;AAAA,MAC3B,SAAA,EAAW,OAAQ,KAAA,CAA0B,SAAA,KAAc;AAAA,KAC7D,CAAE,CAAA;AACF,IAAA,GAAA,CAAI,IAAA,CAAK,EAAE,MAAA,EAAQ,OAAA,EAAS,cAAc,CAAA;AAAA,EAC5C,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,GAAA,CAAI,SAAA,EAAW,OAAO,GAAA,EAAK,GAAA,KAAQ;AACxC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,OAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,eAAe,SAAA,EAAW,MAAA,CAAO,KAAK,MAAA,CAAO,MAAM,GAAG,CAAA;AAC9G,MAAA;AAAA,IACF;AACA,IAAA,GAAA,CAAI,IAAA,CAAK;AAAA,MACP,IAAA,EAAM,IAAI,MAAA,CAAO,KAAA;AAAA,MACjB,MAAO,KAAA,CAAoB,IAAA;AAAA,MAC3B,SAAA,EAAW,OAAQ,KAAA,CAA0B,SAAA,KAAc;AAAA,KAC5D,CAAA;AAAA,EACH,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,OAAO,GAAA,EAAK,GAAA,KAAQ;AACzC,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,WAAA,CAAA,EAAe,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,IAAA,IAAI,CAAC,MAAM,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2CAA2C,CAAA;AAAG,MAAA;AAAA,IAAQ;AACxG,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,KAAA,CAAM,GAAA,CAAI,KAAK,KAAK,CAAA;AACzC,MAAA,GAAA,CAAI,IAAA,CAAK;AAAA,QACP,QAAQ,MAAA,CAAO,MAAA;AAAA,QACf,WAAW,MAAA,CAAO,SAAA;AAAA,QAClB,gBAAgB,MAAA,CAAO,cAAA;AAAA,QACvB,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,UAAU,MAAA,CAAO;AAAA,OAClB,CAAA;AAAA,IACH,SAAS,GAAA,EAAK;AACZ,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAQ,GAAA,CAAc,SAAS,CAAA;AAAA,IACxD;AAAA,EACF,CAAC,CAAA;AAGD,EAAA,MAAA,CAAO,IAAA,CAAK,gBAAA,EAAkB,OAAO,GAAA,EAAK,GAAA,KAAQ;AAChD,IAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,IAAA,IAAI,CAAE,MAAM,SAAA,CAAU,MAAA,EAAQ,GAAG,CAAA,EAAI;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,gBAAgB,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,MAAA,CAAO,GAAA,CAAI,OAAO,KAAK,CAAA;AAC5C,IAAA,IAAI,CAAC,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,WAAA,CAAA,EAAe,CAAA;AAAG,MAAA;AAAA,IAAQ;AAChG,IAAA,IAAI,OAAO,KAAA,CAAM,SAAA,KAAc,UAAA,EAAY;AACzC,MAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK,EAAE,KAAA,EAAO,CAAA,OAAA,EAAU,GAAA,CAAI,MAAA,CAAO,KAAK,CAAA,4BAAA,CAAA,EAAgC,CAAA;AACxF,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAO,GAAA,CAAI,IAAA;AACjB,IAAA,IAAI,CAAC,MAAM,KAAA,EAAO;AAAE,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,KAAK,EAAE,KAAA,EAAO,2CAA2C,CAAA;AAAG,MAAA;AAAA,IAAQ;AAExG,IAAA,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAmB,CAAA;AACjD,IAAA,GAAA,CAAI,SAAA,CAAU,iBAAiB,UAAU,CAAA;AACzC,IAAA,GAAA,CAAI,SAAA,CAAU,cAAc,YAAY,CAAA;AACxC,IAAA,GAAA,CAAI,SAAA,CAAU,qBAAqB,IAAI,CAAA;AAEvC,IAAA,MAAM,IAAA,GAAO,CAAC,IAAA,KAAkB,GAAA,CAAI,MAAM,CAAA,MAAA,EAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC;;AAAA,CAAM,CAAA;AAE7E,IAAA,IAAI;AACF,MAAA,WAAA,MAAiB,KAAA,IAAS,KAAA,CAAM,SAAA,CAAU,IAAA,CAAK,KAAK,CAAA,EAAG;AACrD,QAAA,IAAA,CAAK,KAAK,CAAA;AACV,QAAA,IAAI,KAAA,CAAM,IAAA,KAAS,MAAA,IAAU,KAAA,CAAM,SAAS,OAAA,EAAS;AAAA,MACvD;AAAA,IACF,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAU,GAAA,CAAc,SAAS,CAAA;AAAA,IACzD;AACA,IAAA,GAAA,CAAI,GAAA,EAAI;AAAA,EACV,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT","file":"index.js","sourcesContent":["import { Router } from 'express';\nimport type { Request, Response } from 'express';\nimport type { BaseAgent } from '@orka-js/agent';\nimport type { LLMStreamEvent } from '@orka-js/core';\nimport type { OrkaExpressConfig, AgentRunRequest } from './types.js';\n\nconst ORKA_VERSION = '1.0.0';\n\nasync function checkAuth(config: OrkaExpressConfig, req: Request): Promise<boolean> {\n  if (!config.auth) return true;\n  try {\n    return await config.auth(req);\n  } catch {\n    return false;\n  }\n}\n\nfunction setCors(res: Response, origin: string | false): void {\n  if (origin === false) return;\n  res.setHeader('Access-Control-Allow-Origin', origin);\n  res.setHeader('Access-Control-Allow-Methods', 'GET, POST, OPTIONS');\n  res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');\n}\n\ntype StreamableAgent = BaseAgent & { runStream?: (input: string) => AsyncIterable<LLMStreamEvent> };\ntype GoalAgent = BaseAgent & { goal?: string };\n\nexport function orkaMiddleware(config: OrkaExpressConfig): ReturnType<typeof Router> {\n  const router = Router();\n  const corsOrigin = config.cors !== undefined ? config.cors : '*';\n\n  router.options('*', (_req, res) => {\n    setCors(res, corsOrigin);\n    res.status(204).end();\n  });\n\n  // GET / — list agents\n  router.get('/', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agents = Object.entries(config.agents).map(([name, agent]) => ({\n      name,\n      goal: (agent as GoalAgent).goal,\n      streaming: typeof (agent as StreamableAgent).runStream === 'function',\n    }));\n    res.json({ agents, version: ORKA_VERSION });\n  });\n\n  // GET /:agent — agent info\n  router.get('/:agent', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agent = config.agents[req.params.agent];\n    if (!agent) {\n      res.status(404).json({ error: `Agent \"${req.params.agent}\" not found`, available: Object.keys(config.agents) });\n      return;\n    }\n    res.json({\n      name: req.params.agent,\n      goal: (agent as GoalAgent).goal,\n      streaming: typeof (agent as StreamableAgent).runStream === 'function',\n    });\n  });\n\n  // POST /:agent — run agent (non-streaming)\n  router.post('/:agent', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agent = config.agents[req.params.agent];\n    if (!agent) { res.status(404).json({ error: `Agent \"${req.params.agent}\" not found` }); return; }\n    const body = req.body as AgentRunRequest;\n    if (!body?.input) { res.status(400).json({ error: 'Request body must include \"input\" field' }); return; }\n    try {\n      const result = await agent.run(body.input);\n      res.json({\n        output: result.output,\n        toolsUsed: result.toolsUsed,\n        totalLatencyMs: result.totalLatencyMs,\n        totalTokens: result.totalTokens,\n        metadata: result.metadata,\n      });\n    } catch (err) {\n      res.status(500).json({ error: (err as Error).message });\n    }\n  });\n\n  // POST /:agent/stream — SSE streaming\n  router.post('/:agent/stream', async (req, res) => {\n    setCors(res, corsOrigin);\n    if (!(await checkAuth(config, req))) { res.status(401).json({ error: 'Unauthorized' }); return; }\n    const agent = config.agents[req.params.agent] as StreamableAgent | undefined;\n    if (!agent) { res.status(404).json({ error: `Agent \"${req.params.agent}\" not found` }); return; }\n    if (typeof agent.runStream !== 'function') {\n      res.status(400).json({ error: `Agent \"${req.params.agent}\" does not support streaming` });\n      return;\n    }\n    const body = req.body as AgentRunRequest;\n    if (!body?.input) { res.status(400).json({ error: 'Request body must include \"input\" field' }); return; }\n\n    res.setHeader('Content-Type', 'text/event-stream');\n    res.setHeader('Cache-Control', 'no-cache');\n    res.setHeader('Connection', 'keep-alive');\n    res.setHeader('X-Accel-Buffering', 'no');\n\n    const send = (data: unknown) => res.write(`data: ${JSON.stringify(data)}\\n\\n`);\n\n    try {\n      for await (const event of agent.runStream(body.input)) {\n        send(event);\n        if (event.type === 'done' || event.type === 'error') break;\n      }\n    } catch (err) {\n      send({ type: 'error', message: (err as Error).message });\n    }\n    res.end();\n  });\n\n  return router;\n}\n"]}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@orka-js/express",
+  "version": "1.1.0",
+  "description": "Express.js middleware for OrkaJS agents — expose agents as HTTP endpoints with SSE streaming",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "keywords": [
+    "orkajs",
+    "orka",
+    "express",
+    "middleware",
+    "ai",
+    "agent",
+    "http",
+    "sse",
+    "streaming"
+  ],
+  "author": "OrkaJS Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/orka-js/orkajs.git",
+    "directory": "packages/express"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "@orka-js/core": "^1.5.0",
+    "@orka-js/agent": "^1.5.2"
+  },
+  "devDependencies": {
+    "@types/express": "^4.17.21",
+    "express": "^4.18.3",
+    "tsup": "^8.0.1",
+    "typescript": "^5.3.3",
+    "vitest": "^1.6.0"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests"
+  }
+}