@oscharko-dev/keiko-server 0.2.0

package/dist/sse-write.js

@@ -0,0 +1,26 @@
+// Shared SSE backpressure helper. Every SSE path in the server must call res.write() and react to
+// the boolean it returns: false means the kernel send-buffer is full and the client is not draining.
+// Continuing to write would grow Node's internal stream buffer without bound; the correct response is
+// to abort the in-flight generator (so the model/queue call stops producing) and destroy the socket.
+//
+// Usage (mirrors terminal-routes.ts writeTerminalEvent and run-handlers.ts SseWriter.write):
+//
+//   writeOrDestroy(ctx.res, frame, controller);
+//
+// The controller parameter is an AbortController (or null when the caller manages abort separately
+// via its own signal). Destroying the socket fires "close" on res, which the caller's existing
+// res.on("close", …) listener picks up for any additional cleanup (e.g. registry deregistration).
+/**
+ * Writes `frame` to `res`. When `res.write` returns false (TCP send-buffer full / slow client),
+ * aborts `controller` (stops the upstream producer) and destroys the socket.
+ *
+ * Returns the raw boolean from `res.write` so callers can short-circuit if needed.
+ */
+export function writeOrDestroy(res, frame, controller) {
+    const accepted = res.write(frame);
+    if (!accepted) {
+        controller.abort();
+        res.destroy();
+    }
+    return accepted;
+}

package/dist/sse.d.ts

@@ -0,0 +1,8 @@
+import type { ServerResponse } from "node:http";
+import type { StreamEvent } from "./sink.js";
+import type { Redactor } from "./deps.js";
+export declare const SSE_HEADERS: Readonly<Record<string, string>>;
+export declare function frameEvent(event: StreamEvent, redactor: Redactor): string;
+export declare function readyMessage(): string;
+export declare function writeEvent(res: ServerResponse, event: StreamEvent, redactor: Redactor): boolean;
+//# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIxD,CAAC;AAIF,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAGzE;AAID,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAID,wBAAgB,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAE/F"}

package/dist/sse.js

@@ -0,0 +1,27 @@
+// Server-Sent Events framing for the run event stream (ADR-0011 D5/D7). One harness/workflow event
+// becomes one SSE message: `id:` is the event `seq` (the Last-Event-ID resume cursor), `event:` is
+// the event `type`, `data:` is the redacted event JSON on a single line, terminated by a blank line.
+// The event JSON is produced by `JSON.stringify`, which never emits a raw newline inside a string
+// (newlines are escaped as `\n`), so a single `data:` line is always valid — no regex, no manual
+// escaping. A synthetic `ready` message is sent after the buffered replay.
+export const SSE_HEADERS = {
+    "Content-Type": "text/event-stream; charset=utf-8",
+    "Cache-Control": "no-store",
+    Connection: "keep-alive",
+};
+// Frames one event as an SSE message. The event is redacted (defense in depth: live events are
+// already redacted by the harness emitter, D7) before serialization.
+export function frameEvent(event, redactor) {
+    const data = JSON.stringify(redactor(event));
+    return `id: ${String(event.seq)}\nevent: ${event.type}\ndata: ${data}\n\n`;
+}
+// The synthetic message sent once the buffered replay completes, signalling the client that it is
+// now live. Carries no data payload.
+export function readyMessage() {
+    return `event: ready\ndata: {}\n\n`;
+}
+// Writes one framed event to the response stream. Returns Node's backpressure signal so the caller can
+// detach a slow client instead of letting the HTTP response buffer grow without bound.
+export function writeEvent(res, event, redactor) {
+    return res.write(frameEvent(event, redactor));
+}

package/dist/static.d.ts

@@ -0,0 +1,5 @@
+import type { ServerResponse } from "node:http";
+export declare function contentTypeFor(filePath: string): string;
+export declare function resolveContainedPath(root: string, pathname: string): string | undefined;
+export declare function serveFile(res: ServerResponse, filePath: string): Promise<boolean>;
+//# sourceMappingURL=static.d.ts.map

package/dist/static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../src/static.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAwBhD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvD;AAKD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAkBvF;AAOD,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAevF"}

package/dist/static.js

@@ -0,0 +1,76 @@
+// Path-traversal-safe static file serving of the exported UI (ADR-0011 D5/D6). The BFF serves only
+// files contained within `dist/ui/static/`. The request path is decoded, normalized, and resolved
+// against the static root; the resolved path must remain inside the root or the request is refused.
+// There is no shell and no user-controlled path beyond the contained root.
+import { createReadStream } from "node:fs";
+import { lstat } from "node:fs/promises";
+import { join, normalize, resolve, sep, extname } from "node:path";
+const CONTENT_TYPES = {
+    ".html": "text/html; charset=utf-8",
+    ".js": "text/javascript; charset=utf-8",
+    ".css": "text/css; charset=utf-8",
+    ".json": "application/json; charset=utf-8",
+    ".txt": "text/plain; charset=utf-8",
+    ".svg": "image/svg+xml",
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".ico": "image/x-icon",
+    ".woff": "font/woff",
+    ".woff2": "font/woff2",
+    ".map": "application/json; charset=utf-8",
+    // `.webmanifest` is the W3C Web App Manifest media type; browsers refuse to treat a JSON
+    // payload as a manifest under any other Content-Type, so this mapping is load-bearing for
+    // PWA installability (ADR-0024 D4, issue #123).
+    ".webmanifest": "application/manifest+json",
+};
+export function contentTypeFor(filePath) {
+    return CONTENT_TYPES[extname(filePath).toLowerCase()] ?? "application/octet-stream";
+}
+// Resolves a URL pathname to an absolute path strictly contained within `root`, or `undefined` when
+// the request escapes the root (traversal) or cannot be decoded. Containment is enforced on the
+// resolved, normalized path: it must equal `root` or start with `root + sep`.
+export function resolveContainedPath(root, pathname) {
+    let decoded;
+    try {
+        decoded = decodeURIComponent(pathname);
+    }
+    catch {
+        return undefined;
+    }
+    if (decoded.includes("\0")) {
+        return undefined;
+    }
+    // Containment is enforced below on the resolved path, so traversal segments cannot escape the
+    // root regardless of their position; `normalize` only collapses redundant separators here.
+    const candidate = resolve(join(root, normalize(decoded)));
+    const containedRoot = resolve(root);
+    if (candidate !== containedRoot && !candidate.startsWith(containedRoot + sep)) {
+        return undefined;
+    }
+    return candidate;
+}
+// Streams the file at `filePath` with the correct content type. Returns false when the path is not
+// a regular file (caller then falls back to the SPA index or a 404). Uses `lstat` (not `stat`) so a
+// symlink planted in the static root is NOT followed: a regular file is served, a symlink is refused
+// even when it points back inside the root — matching the audit store's never-follow-a-symlink rule
+// (defense in depth; the export pipeline emits only regular files).
+export async function serveFile(res, filePath) {
+    let info;
+    try {
+        info = await lstat(filePath);
+    }
+    catch {
+        return false;
+    }
+    if (info.isSymbolicLink() || !info.isFile()) {
+        return false;
+    }
+    res.statusCode = 200;
+    res.setHeader("Content-Type", contentTypeFor(filePath));
+    res.setHeader("Content-Length", info.size);
+    createReadStream(filePath).pipe(res);
+    return true;
+}

package/dist/store/chats.d.ts

@@ -0,0 +1,17 @@
+import type { DatabaseSync } from "node:sqlite";
+import type { Chat, CreateChatOptions, UpdateChatOptions, UpdateChatPatch } from "./types.js";
+export declare function listChats(db: DatabaseSync, projectPath: string): readonly Chat[];
+export declare function listChatsLimited(db: DatabaseSync, projectPath: string, limit: number): readonly Chat[];
+export declare function findChatById(db: DatabaseSync, id: string): Chat | undefined;
+export declare function insertChat(db: DatabaseSync, args: {
+    readonly id: string;
+    readonly projectPath: string;
+    readonly title: string;
+    readonly selectedModel: string;
+    readonly opts: CreateChatOptions | undefined;
+    readonly now: number;
+}): Chat;
+export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number, options?: UpdateChatOptions): Chat;
+export declare function deleteChat(db: DatabaseSync, id: string): void;
+export declare function touchChat(db: DatabaseSync, id: string, now: number): void;
+//# sourceMappingURL=chats.d.ts.map

package/dist/store/chats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAahD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AAiXpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAuTD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CA4BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}