@pellux/goodvibes-daemon-sdk 0.30.3 → 0.33.0

package/dist/operator.js

@@ -1,10 +1,58 @@
 import { readBoundedPositiveInteger } from './route-helpers.js';
+/**
+ * Thrown when a URL path segment contains malformed percent-encoded sequences.
+ * Caught at the dispatch boundary to return a 400 INVALID_PATH_ENCODING response.
+ */
+class InvalidPathEncodingError extends Error {
+    constructor() { super('INVALID_PATH_ENCODING'); }
+}
+/**
+ * Decode a URL path segment. Throws InvalidPathEncodingError on malformed
+ * percent-encoded sequences (e.g. `%E0%A4`) instead of passing null downstream.
+ */
+function safeDecodeURIComponent(segment) {
+    try {
+        return decodeURIComponent(segment);
+    }
+    catch {
+        throw new InvalidPathEncodingError();
+    }
+}
+const INVALID_ENCODING_RESPONSE = Response.json({ error: 'INVALID_PATH_ENCODING', code: 'INVALID_PATH_ENCODING' }, { status: 400 });
+/**
+ * Route-level authentication is enforced inside each handler, not at the
+ * dispatcher level. Handler auth requirements by category:
+ *
+ * - READ-ONLY routes (status, providers, settings, continuity, intelligence,
+ *   worktrees, watchers, approvals, telemetry snapshot) — require admin or
+ *   authenticated session per handler implementation.
+ * - STATE-CHANGING routes (service install/start/stop, route bindings,
+ *   automation jobs, knowledge ingest) — always `withAdmin(context, req, ...)`.
+ * - SCHEDULER/RUNTIME routes (getSchedulerCapacity, getRuntimeMetrics) —
+ *   require admin per handler implementation.
+ *
+ * Dispatcher does not short-circuit unauthenticated requests; all auth
+ * enforcement lives in the handler factories (system-routes.ts,
+ * integration-routes.ts, runtime-automation-routes.ts, etc.).
+ */
 export async function dispatchOperatorRoutes(req, handlers) {
+    try {
+        return await dispatchOperatorRoutesInner(req, handlers);
+    }
+    catch (e) {
+        if (e instanceof InvalidPathEncodingError)
+            return INVALID_ENCODING_RESPONSE;
+        throw e;
+    }
+}
+async function dispatchOperatorRoutesInner(req, handlers) {
     const url = new URL(req.url);
     const { pathname } = url;
     const method = req.method;
+    if (pathname === '/login' && method === 'POST')
+        return handlers.postLogin(req);
     if (pathname === '/status' && method === 'GET')
-        return handlers.getStatus();
+        return handlers.getStatus(req);
     if (pathname === '/api/control-plane/auth' && method === 'GET')
         return handlers.getCurrentAuth(req);
     if (pathname === '/api/control-plane' && method === 'GET')
@@ -49,10 +97,10 @@ export async function dispatchOperatorRoutes(req, handlers) {
         return handlers.getGatewayMethods(url);
     const gatewayMethodInvokeMatch = pathname.match(/^\/api\/control-plane\/methods\/([^/]+)\/invoke$/);
     if (gatewayMethodInvokeMatch && method === 'POST')
-        return handlers.invokeGatewayMethod(decodeURIComponent(gatewayMethodInvokeMatch[1]), req);
+        return handlers.invokeGatewayMethod(safeDecodeURIComponent(gatewayMethodInvokeMatch[1]), req);
     const gatewayMethodMatch = pathname.match(/^\/api\/control-plane\/methods\/([^/]+)$/);
     if (gatewayMethodMatch && method === 'GET')
-        return handlers.getGatewayMethod(decodeURIComponent(gatewayMethodMatch[1]));
+        return handlers.getGatewayMethod(safeDecodeURIComponent(gatewayMethodMatch[1]));
     if (pathname === '/api/control-plane/events/catalog' && method === 'GET')
         return handlers.getGatewayEvents(url);
     if (pathname === '/api/control-plane/events' && method === 'GET')
@@ -73,79 +121,75 @@ export async function dispatchOperatorRoutes(req, handlers) {
         return handlers.getChannelActions();
     const channelAccountDefaultActionMatch = pathname.match(/^\/api\/channels\/accounts\/([^/]+)\/actions\/([^/]+)$/);
     if (channelAccountDefaultActionMatch && method === 'POST') {
-        return handlers.postChannelAccountAction(decodeURIComponent(channelAccountDefaultActionMatch[1]), null, decodeURIComponent(channelAccountDefaultActionMatch[2]), req);
+        return handlers.postChannelAccountAction(safeDecodeURIComponent(channelAccountDefaultActionMatch[1]), null, safeDecodeURIComponent(channelAccountDefaultActionMatch[2]), req);
     }
     const channelAccountActionMatch = pathname.match(/^\/api\/channels\/accounts\/([^/]+)\/([^/]+)\/actions\/([^/]+)$/);
     if (channelAccountActionMatch && method === 'POST') {
-        return handlers.postChannelAccountAction(decodeURIComponent(channelAccountActionMatch[1]), decodeURIComponent(channelAccountActionMatch[2]), decodeURIComponent(channelAccountActionMatch[3]), req);
+        return handlers.postChannelAccountAction(safeDecodeURIComponent(channelAccountActionMatch[1]), safeDecodeURIComponent(channelAccountActionMatch[2]), safeDecodeURIComponent(channelAccountActionMatch[3]), req);
     }
     const channelSetupMatch = pathname.match(/^\/api\/channels\/setup\/([^/]+)$/);
     if (channelSetupMatch && method === 'GET') {
-        return handlers.getChannelSetupSchema(decodeURIComponent(channelSetupMatch[1]), url);
+        return handlers.getChannelSetupSchema(safeDecodeURIComponent(channelSetupMatch[1]), url);
     }
     const channelDoctorMatch = pathname.match(/^\/api\/channels\/doctor\/([^/]+)$/);
     if (channelDoctorMatch && method === 'GET') {
-        return handlers.getChannelDoctor(decodeURIComponent(channelDoctorMatch[1]), url);
+        return handlers.getChannelDoctor(safeDecodeURIComponent(channelDoctorMatch[1]), url);
     }
     const channelRepairActionsMatch = pathname.match(/^\/api\/channels\/repair-actions\/([^/]+)$/);
     if (channelRepairActionsMatch && method === 'GET') {
-        return handlers.getChannelRepairActions(decodeURIComponent(channelRepairActionsMatch[1]), url);
-    }
-    const channelLifecycleMigrateMatch = pathname.match(/^\/api\/channels\/lifecycle\/([^/]+)\/migrate$/);
-    if (channelLifecycleMigrateMatch && method === 'POST') {
-        return handlers.postChannelLifecycleMigrate(decodeURIComponent(channelLifecycleMigrateMatch[1]), req);
+        return handlers.getChannelRepairActions(safeDecodeURIComponent(channelRepairActionsMatch[1]), url);
     }
     const channelLifecycleMatch = pathname.match(/^\/api\/channels\/lifecycle\/([^/]+)$/);
     if (channelLifecycleMatch && method === 'GET') {
-        return handlers.getChannelLifecycle(decodeURIComponent(channelLifecycleMatch[1]), url);
+        return handlers.getChannelLifecycle(safeDecodeURIComponent(channelLifecycleMatch[1]), url);
     }
     const channelResolveTargetMatch = pathname.match(/^\/api\/channels\/targets\/([^/]+)\/resolve$/);
     if (channelResolveTargetMatch && method === 'POST') {
-        return handlers.postChannelResolveTarget(decodeURIComponent(channelResolveTargetMatch[1]), req);
+        return handlers.postChannelResolveTarget(safeDecodeURIComponent(channelResolveTargetMatch[1]), req);
     }
     const channelAuthorizeMatch = pathname.match(/^\/api\/channels\/authorize\/([^/]+)$/);
     if (channelAuthorizeMatch && method === 'POST') {
-        return handlers.postChannelAuthorize(decodeURIComponent(channelAuthorizeMatch[1]), req);
+        return handlers.postChannelAuthorize(safeDecodeURIComponent(channelAuthorizeMatch[1]), req);
     }
     const channelAllowlistResolveMatch = pathname.match(/^\/api\/channels\/allowlist\/([^/]+)\/resolve$/);
     if (channelAllowlistResolveMatch && method === 'POST') {
-        return handlers.postChannelAllowlistResolve(decodeURIComponent(channelAllowlistResolveMatch[1]), req);
+        return handlers.postChannelAllowlistResolve(safeDecodeURIComponent(channelAllowlistResolveMatch[1]), req);
     }
     const channelAllowlistEditMatch = pathname.match(/^\/api\/channels\/allowlist\/([^/]+)\/edit$/);
     if (channelAllowlistEditMatch && method === 'POST') {
-        return handlers.postChannelAllowlistEdit(decodeURIComponent(channelAllowlistEditMatch[1]), req);
+        return handlers.postChannelAllowlistEdit(safeDecodeURIComponent(channelAllowlistEditMatch[1]), req);
     }
     const channelAccountMatch = pathname.match(/^\/api\/channels\/accounts\/([^/]+)\/([^/]+)$/);
     if (channelAccountMatch && method === 'GET') {
-        return handlers.getChannelAccount(decodeURIComponent(channelAccountMatch[1]), decodeURIComponent(channelAccountMatch[2]));
+        return handlers.getChannelAccount(safeDecodeURIComponent(channelAccountMatch[1]), safeDecodeURIComponent(channelAccountMatch[2]));
     }
     const channelActionPostMatch = pathname.match(/^\/api\/channels\/actions\/([^/]+)\/([^/]+)$/);
     if (channelActionPostMatch && method === 'POST') {
-        return handlers.postChannelAction(decodeURIComponent(channelActionPostMatch[1]), decodeURIComponent(channelActionPostMatch[2]), req);
+        return handlers.postChannelAction(safeDecodeURIComponent(channelActionPostMatch[1]), safeDecodeURIComponent(channelActionPostMatch[2]), req);
     }
     const channelSurfaceAccountsMatch = pathname.match(/^\/api\/channels\/accounts\/([^/]+)$/);
     if (channelSurfaceAccountsMatch && method === 'GET') {
-        return handlers.getChannelSurfaceAccounts(decodeURIComponent(channelSurfaceAccountsMatch[1]));
+        return handlers.getChannelSurfaceAccounts(safeDecodeURIComponent(channelSurfaceAccountsMatch[1]));
     }
     const channelSurfaceCapabilitiesMatch = pathname.match(/^\/api\/channels\/capabilities\/([^/]+)$/);
     if (channelSurfaceCapabilitiesMatch && method === 'GET') {
-        return handlers.getChannelSurfaceCapabilities(decodeURIComponent(channelSurfaceCapabilitiesMatch[1]));
+        return handlers.getChannelSurfaceCapabilities(safeDecodeURIComponent(channelSurfaceCapabilitiesMatch[1]));
     }
     const channelSurfaceToolsMatch = pathname.match(/^\/api\/channels\/tools\/([^/]+)$/);
     if (channelSurfaceToolsMatch && method === 'GET') {
-        return handlers.getChannelSurfaceTools(decodeURIComponent(channelSurfaceToolsMatch[1]));
+        return handlers.getChannelSurfaceTools(safeDecodeURIComponent(channelSurfaceToolsMatch[1]));
     }
     const channelSurfaceAgentToolsMatch = pathname.match(/^\/api\/channels\/agent-tools\/([^/]+)$/);
     if (channelSurfaceAgentToolsMatch && method === 'GET') {
-        return handlers.getChannelSurfaceAgentTools(decodeURIComponent(channelSurfaceAgentToolsMatch[1]));
+        return handlers.getChannelSurfaceAgentTools(safeDecodeURIComponent(channelSurfaceAgentToolsMatch[1]));
     }
     const channelToolPostMatch = pathname.match(/^\/api\/channels\/tools\/([^/]+)\/([^/]+)$/);
     if (channelToolPostMatch && method === 'POST') {
-        return handlers.postChannelTool(decodeURIComponent(channelToolPostMatch[1]), decodeURIComponent(channelToolPostMatch[2]), req);
+        return handlers.postChannelTool(safeDecodeURIComponent(channelToolPostMatch[1]), safeDecodeURIComponent(channelToolPostMatch[2]), req);
     }
     const channelSurfaceActionsMatch = pathname.match(/^\/api\/channels\/actions\/([^/]+)$/);
     if (channelSurfaceActionsMatch && method === 'GET') {
-        return handlers.getChannelSurfaceActions(decodeURIComponent(channelSurfaceActionsMatch[1]));
+        return handlers.getChannelSurfaceActions(safeDecodeURIComponent(channelSurfaceActionsMatch[1]));
     }
     if (pathname === '/api/channels/policies' && method === 'GET')
         return handlers.getChannelPolicies();
@@ -171,31 +215,31 @@ export async function dispatchOperatorRoutes(req, handlers) {
     if (watcherUpdateMatch && method === 'PATCH')
         return handlers.patchWatcher(watcherUpdateMatch[1], req);
     if (watcherUpdateMatch && method === 'DELETE')
-        return handlers.deleteWatcher(watcherUpdateMatch[1]);
+        return handlers.deleteWatcher(watcherUpdateMatch[1], req);
     const watcherActionMatch = pathname.match(/^\/api\/watchers\/([^/]+)\/(start|stop|run)$/);
     if (watcherActionMatch && method === 'POST')
-        return handlers.watcherAction(watcherActionMatch[1], watcherActionMatch[2]);
+        return handlers.watcherAction(watcherActionMatch[1], watcherActionMatch[2], req);
     if (pathname === '/api/service/status' && method === 'GET')
         return handlers.getServiceStatus();
     if (pathname === '/api/service/install' && method === 'POST')
-        return handlers.installService();
+        return handlers.installService(req);
     if (pathname === '/api/service/start' && method === 'POST')
-        return handlers.startService();
+        return handlers.startService(req);
     if (pathname === '/api/service/stop' && method === 'POST')
-        return handlers.stopService();
+        return handlers.stopService(req);
     if (pathname === '/api/service/restart' && method === 'POST')
-        return handlers.restartService();
+        return handlers.restartService(req);
     if (pathname === '/api/service/uninstall' && method === 'POST')
-        return handlers.uninstallService();
+        return handlers.uninstallService(req);
     if (pathname === '/api/routes/bindings' && method === 'GET')
-        return handlers.getRouteBindings();
+        return handlers.getRouteBindings(req);
     if (pathname === '/api/routes/bindings' && method === 'POST')
         return handlers.postRouteBinding(req);
     const routeBindingMatch = pathname.match(/^\/api\/routes\/bindings\/([^/]+)$/);
     if (routeBindingMatch && method === 'PATCH')
         return handlers.patchRouteBinding(routeBindingMatch[1], req);
     if (routeBindingMatch && method === 'DELETE')
-        return handlers.deleteRouteBinding(routeBindingMatch[1]);
+        return handlers.deleteRouteBinding(routeBindingMatch[1], req);
     if (pathname === '/api/approvals' && method === 'GET')
         return handlers.getApprovals();
     const approvalActionMatch = pathname.match(/^\/api\/approvals\/([^/]+)\/(claim|approve|deny|cancel)$/);
@@ -213,10 +257,10 @@ export async function dispatchOperatorRoutes(req, handlers) {
         return handlers.getProviders();
     const providerUsageMatch = pathname.match(/^\/api\/providers\/([^/]+)\/usage$/);
     if (providerUsageMatch && method === 'GET')
-        return handlers.getProviderUsage(decodeURIComponent(providerUsageMatch[1]));
+        return handlers.getProviderUsage(safeDecodeURIComponent(providerUsageMatch[1]));
     const providerMatch = pathname.match(/^\/api\/providers\/([^/]+)$/);
     if (providerMatch && method === 'GET')
-        return handlers.getProvider(decodeURIComponent(providerMatch[1]));
+        return handlers.getProvider(safeDecodeURIComponent(providerMatch[1]));
     if (pathname === '/api/settings' && method === 'GET')
         return handlers.getSettings();
     if (pathname === '/api/security-settings' && method === 'GET')
@@ -305,51 +349,51 @@ export async function dispatchOperatorRoutes(req, handlers) {
         return handlers.postKnowledgeMaterializeProjection(req);
     const knowledgeConnectorDoctorMatch = pathname.match(/^\/api\/knowledge\/connectors\/([^/]+)\/doctor$/);
     if (knowledgeConnectorDoctorMatch && method === 'GET')
-        return handlers.getKnowledgeConnectorDoctor(decodeURIComponent(knowledgeConnectorDoctorMatch[1]));
+        return handlers.getKnowledgeConnectorDoctor(safeDecodeURIComponent(knowledgeConnectorDoctorMatch[1]));
     const knowledgeConnectorMatch = pathname.match(/^\/api\/knowledge\/connectors\/([^/]+)$/);
     if (knowledgeConnectorMatch && method === 'GET')
-        return handlers.getKnowledgeConnector(decodeURIComponent(knowledgeConnectorMatch[1]));
+        return handlers.getKnowledgeConnector(safeDecodeURIComponent(knowledgeConnectorMatch[1]));
     const knowledgeExtractionMatch = pathname.match(/^\/api\/knowledge\/extractions\/([^/]+)$/);
     if (knowledgeExtractionMatch && method === 'GET')
-        return handlers.getKnowledgeExtraction(decodeURIComponent(knowledgeExtractionMatch[1]));
+        return handlers.getKnowledgeExtraction(safeDecodeURIComponent(knowledgeExtractionMatch[1]));
     const knowledgeIssueReviewMatch = pathname.match(/^\/api\/knowledge\/issues\/([^/]+)\/review$/);
     if (knowledgeIssueReviewMatch && method === 'POST')
-        return handlers.postKnowledgeReviewIssue(decodeURIComponent(knowledgeIssueReviewMatch[1]), req);
+        return handlers.postKnowledgeReviewIssue(safeDecodeURIComponent(knowledgeIssueReviewMatch[1]), req);
     const knowledgeCandidateDecideMatch = pathname.match(/^\/api\/knowledge\/candidates\/([^/]+)\/decide$/);
     if (knowledgeCandidateDecideMatch && method === 'POST')
-        return handlers.postKnowledgeDecideCandidate(decodeURIComponent(knowledgeCandidateDecideMatch[1]), req);
+        return handlers.postKnowledgeDecideCandidate(safeDecodeURIComponent(knowledgeCandidateDecideMatch[1]), req);
     const knowledgeCandidateMatch = pathname.match(/^\/api\/knowledge\/candidates\/([^/]+)$/);
     if (knowledgeCandidateMatch && method === 'GET')
-        return handlers.getKnowledgeCandidate(decodeURIComponent(knowledgeCandidateMatch[1]));
+        return handlers.getKnowledgeCandidate(safeDecodeURIComponent(knowledgeCandidateMatch[1]));
     const knowledgeReportMatch = pathname.match(/^\/api\/knowledge\/reports\/([^/]+)$/);
     if (knowledgeReportMatch && method === 'GET')
-        return handlers.getKnowledgeReport(decodeURIComponent(knowledgeReportMatch[1]));
+        return handlers.getKnowledgeReport(safeDecodeURIComponent(knowledgeReportMatch[1]));
     const knowledgeSourceExtractionMatch = pathname.match(/^\/api\/knowledge\/sources\/([^/]+)\/extraction$/);
     if (knowledgeSourceExtractionMatch && method === 'GET')
-        return handlers.getKnowledgeSourceExtraction(decodeURIComponent(knowledgeSourceExtractionMatch[1]));
+        return handlers.getKnowledgeSourceExtraction(safeDecodeURIComponent(knowledgeSourceExtractionMatch[1]));
     const knowledgeJobRunMatch = pathname.match(/^\/api\/knowledge\/jobs\/([^/]+)\/run$/);
     if (knowledgeJobRunMatch && method === 'POST')
-        return handlers.postKnowledgeRunJob(decodeURIComponent(knowledgeJobRunMatch[1]), req);
+        return handlers.postKnowledgeRunJob(safeDecodeURIComponent(knowledgeJobRunMatch[1]), req);
     const knowledgeJobMatch = pathname.match(/^\/api\/knowledge\/jobs\/([^/]+)$/);
     if (knowledgeJobMatch && method === 'GET')
-        return handlers.getKnowledgeJob(decodeURIComponent(knowledgeJobMatch[1]));
+        return handlers.getKnowledgeJob(safeDecodeURIComponent(knowledgeJobMatch[1]));
     const knowledgeRefinementTaskCancelMatch = pathname.match(/^\/api\/knowledge\/refinement\/tasks\/([^/]+)\/cancel$/);
     if (knowledgeRefinementTaskCancelMatch && method === 'POST')
-        return handlers.postKnowledgeCancelRefinementTask(decodeURIComponent(knowledgeRefinementTaskCancelMatch[1]), req);
+        return handlers.postKnowledgeCancelRefinementTask(safeDecodeURIComponent(knowledgeRefinementTaskCancelMatch[1]), req);
     const knowledgeRefinementTaskMatch = pathname.match(/^\/api\/knowledge\/refinement\/tasks\/([^/]+)$/);
     if (knowledgeRefinementTaskMatch && method === 'GET')
-        return handlers.getKnowledgeRefinementTask(decodeURIComponent(knowledgeRefinementTaskMatch[1]));
+        return handlers.getKnowledgeRefinementTask(safeDecodeURIComponent(knowledgeRefinementTaskMatch[1]));
     const knowledgeScheduleEnabledMatch = pathname.match(/^\/api\/knowledge\/schedules\/([^/]+)\/enabled$/);
     if (knowledgeScheduleEnabledMatch && method === 'POST')
-        return handlers.postKnowledgeSetScheduleEnabled(decodeURIComponent(knowledgeScheduleEnabledMatch[1]), req);
+        return handlers.postKnowledgeSetScheduleEnabled(safeDecodeURIComponent(knowledgeScheduleEnabledMatch[1]), req);
     const knowledgeScheduleMatch = pathname.match(/^\/api\/knowledge\/schedules\/([^/]+)$/);
     if (knowledgeScheduleMatch && method === 'GET')
-        return handlers.getKnowledgeSchedule(decodeURIComponent(knowledgeScheduleMatch[1]));
+        return handlers.getKnowledgeSchedule(safeDecodeURIComponent(knowledgeScheduleMatch[1]));
     if (knowledgeScheduleMatch && method === 'DELETE')
-        return handlers.deleteKnowledgeSchedule(decodeURIComponent(knowledgeScheduleMatch[1]), req);
+        return handlers.deleteKnowledgeSchedule(safeDecodeURIComponent(knowledgeScheduleMatch[1]), req);
     const knowledgeItemMatch = pathname.match(/^\/api\/knowledge\/items\/([^/]+)$/);
     if (knowledgeItemMatch && method === 'GET')
-        return handlers.getKnowledgeItem(decodeURIComponent(knowledgeItemMatch[1]));
+        return handlers.getKnowledgeItem(safeDecodeURIComponent(knowledgeItemMatch[1]));
     if (pathname === '/api/voice' && method === 'GET')
         return handlers.getVoiceStatus();
     if (pathname === '/api/voice/providers' && method === 'GET')
@@ -374,10 +418,10 @@ export async function dispatchOperatorRoutes(req, handlers) {
         return handlers.postArtifact(req);
     const artifactContentMatch = pathname.match(/^\/api\/artifacts\/([^/]+)\/content$/);
     if (artifactContentMatch && method === 'GET')
-        return handlers.getArtifactContent(decodeURIComponent(artifactContentMatch[1]), req);
+        return handlers.getArtifactContent(safeDecodeURIComponent(artifactContentMatch[1]), req);
     const artifactMatch = pathname.match(/^\/api\/artifacts\/([^/]+)$/);
     if (artifactMatch && method === 'GET')
-        return handlers.getArtifact(decodeURIComponent(artifactMatch[1]));
+        return handlers.getArtifact(safeDecodeURIComponent(artifactMatch[1]));
     if (pathname === '/api/media/providers' && method === 'GET')
         return handlers.getMediaProviders();
     if (pathname === '/api/media/analyze' && method === 'POST')
@@ -397,22 +441,22 @@ export async function dispatchOperatorRoutes(req, handlers) {
     if (pathname === '/api/multimodal/writeback' && method === 'POST')
         return handlers.postMultimodalWriteback(req);
     if (pathname === '/api/local-auth' && method === 'GET')
-        return handlers.getLocalAuth();
+        return handlers.getLocalAuth(req);
     if (pathname === '/api/local-auth/users' && method === 'POST')
         return handlers.postLocalAuthUser(req);
     const userMatch = pathname.match(/^\/api\/local-auth\/users\/([^/]+)$/);
     if (userMatch && method === 'DELETE')
-        return handlers.deleteLocalAuthUser(decodeURIComponent(userMatch[1]));
+        return handlers.deleteLocalAuthUser(safeDecodeURIComponent(userMatch[1]), req);
     const passwordMatch = pathname.match(/^\/api\/local-auth\/users\/([^/]+)\/password$/);
     if (passwordMatch && method === 'POST')
-        return handlers.postLocalAuthPassword(decodeURIComponent(passwordMatch[1]), req);
+        return handlers.postLocalAuthPassword(safeDecodeURIComponent(passwordMatch[1]), req);
     const sessionMatch = pathname.match(/^\/api\/local-auth\/sessions\/([^/]+)$/);
     if (sessionMatch && method === 'DELETE')
-        return handlers.deleteLocalAuthSession(decodeURIComponent(sessionMatch[1]));
+        return handlers.deleteLocalAuthSession(safeDecodeURIComponent(sessionMatch[1]), req);
     if (pathname === '/api/local-auth/bootstrap-file' && method === 'DELETE')
-        return handlers.deleteBootstrapFile();
+        return handlers.deleteBootstrapFile(req);
     if (pathname === '/api/runtime/scheduler' && method === 'GET')
-        return handlers.getSchedulerCapacity();
+        return handlers.getSchedulerCapacity(req);
     if (pathname === '/api/runtime/metrics' && method === 'GET')
         return handlers.getRuntimeMetrics();
     if (pathname === '/api/panels' && method === 'GET')
@@ -422,7 +466,7 @@ export async function dispatchOperatorRoutes(req, handlers) {
     if (pathname === '/api/events' && method === 'GET')
         return handlers.getEvents(req);
     if (pathname === '/config' && method === 'GET')
-        return handlers.getConfig();
+        return handlers.getConfig(req);
     if (pathname === '/config' && method === 'POST')
         return handlers.postConfig(req);
     return null;

package/dist/otlp-protobuf.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otlp-protobuf.d.ts","sourceRoot":"","sources":["../src/otlp-protobuf.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAi6B7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASrG"}
+{"version":3,"file":"otlp-protobuf.d.ts","sourceRoot":"","sources":["../src/otlp-protobuf.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAk7B7D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASrG"}

package/dist/otlp-protobuf.js

@@ -147,6 +147,20 @@ function readNumeric(reader, wireType) {
     reader.skip(wireType);
     return undefined;
 }
+/**
+ * Return uint64 fields as string (via BigInt) to preserve nanosecond
+ * precision. Year-2026 timestamps (~1.78e18 ns) exceed Number.MAX_SAFE_INTEGER
+ * (~9e15), so Number conversion loses the low ~7 digits.
+ * OTLP JSON spec §3.4 encodes int64 fields as strings — this matches the spec.
+ */
+function readNumericBigIntAsString(reader, wireType) {
+    if (wireType === 0)
+        return String(reader.readVarint());
+    if (wireType === 1)
+        return String(reader.readFixed64());
+    reader.skip(wireType);
+    return undefined;
+}
 function readFloating(reader, wireType) {
     if (wireType === 1)
         return reader.readDouble();
@@ -212,9 +226,9 @@ function decodeAnyValue(bytes) {
                 break;
             }
             case 3: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
-                    out['intValue'] = String(Math.trunc(value));
+                    out['intValue'] = value;
                 break;
             }
             case 4: {
@@ -452,13 +466,13 @@ function decodeSpan(bytes) {
                 break;
             }
             case 7: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
                     out['startTimeUnixNano'] = value;
                 break;
             }
             case 8: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
                     out['endTimeUnixNano'] = value;
                 break;
@@ -513,7 +527,7 @@ function decodeSpanEvent(bytes) {
         const { fieldNumber, wireType } = reader.readField();
         switch (fieldNumber) {
             case 1: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
                     out['timeUnixNano'] = value;
                 break;
@@ -686,7 +700,7 @@ function decodeLogRecord(bytes) {
         switch (fieldNumber) {
             case 1:
             case 11: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
                     out[fieldNumber === 1 ? 'timeUnixNano' : 'observedTimeUnixNano'] = value;
                 break;
@@ -905,7 +919,7 @@ function decodeNumberDataPoint(bytes) {
         switch (fieldNumber) {
             case 2:
             case 3: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
                     out[fieldNumber === 2 ? 'startTimeUnixNano' : 'timeUnixNano'] = value;
                 break;
@@ -917,9 +931,9 @@ function decodeNumberDataPoint(bytes) {
                 break;
             }
             case 6: {
-                const value = readNumeric(reader, wireType);
+                const value = readNumericBigIntAsString(reader, wireType);
                 if (value !== undefined)
-                    out['asInt'] = String(Math.trunc(value));
+                    out['asInt'] = value;
                 break;
             }
             case 7:
@@ -943,9 +957,13 @@ function decodeGenericDataPoint(bytes) {
     while (!reader.eof()) {
         const { fieldNumber, wireType } = reader.readField();
         if (fieldNumber === 2 || fieldNumber === 3 || fieldNumber === 4 || fieldNumber === 5 || fieldNumber === 10 || fieldNumber === 11 || fieldNumber === 12) {
+            // fields 2/3 are *UnixNano (uint64), use string form to preserve precision.
+            const isNano = fieldNumber === 2 || fieldNumber === 3;
             const value = fieldNumber === 5 || fieldNumber === 11 || fieldNumber === 12
                 ? readFloating(reader, wireType)
-                : readNumeric(reader, wireType);
+                : isNano
+                    ? readNumericBigIntAsString(reader, wireType)
+                    : readNumeric(reader, wireType);
             if (value !== undefined) {
                 out[fieldNumber === 2 ? 'startTimeUnixNano'
                     : fieldNumber === 3 ? 'timeUnixNano'

package/dist/remote-routes.d.ts

@@ -1,5 +1,5 @@
 import type { DaemonRemoteManagementRouteHandlers } from './context.js';
-type JsonBody = Record<string, unknown>;
+import { type JsonRecord } from './route-helpers.js';
 type RemotePeerAuth = unknown;
 interface DistributedRuntimeRouteService {
     listPairRequests(): unknown;
@@ -23,8 +23,8 @@ interface SessionUserLike {
     readonly username: string;
 }
 interface DaemonRemoteRouteContext {
-    readonly authToken?: string | null;
-    readonly parseJsonBody: (req: Request) => Promise<JsonBody | Response>;
+    readonly authToken?: string | null | undefined;
+    readonly parseJsonBody: (req: Request) => Promise<JsonRecord | Response>;
     readonly requireAdmin: (req: Request) => Response | null;
     readonly requireRemotePeer: (req: Request, scope?: string) => Promise<RemotePeerAuth | Response>;
     readonly requireAuthenticatedSession: (req: Request) => SessionUserLike | null;
@@ -36,5 +36,11 @@ export declare function handleRemotePairVerify(context: Pick<DaemonRemoteRouteCo
 export declare function handleRemotePeerHeartbeat(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'requireRemotePeer' | 'distributedRuntime'>, req: Request): Promise<Response>;
 export declare function handleRemotePeerWorkPull(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'requireRemotePeer' | 'distributedRuntime'>, req: Request): Promise<Response>;
 export declare function handleRemotePeerWorkComplete(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'requireRemotePeer' | 'distributedRuntime'>, workId: string, req: Request): Promise<Response>;
+export declare function estimateJsonByteLengthWithinLimit(value: unknown, maxBytes: number): {
+    readonly kind: 'ok';
+    readonly byteLength: number;
+} | {
+    readonly kind: 'invalid';
+};
 export {};
 //# sourceMappingURL=remote-routes.d.ts.map

package/dist/remote-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-routes.d.ts","sourceRoot":"","sources":["../src/remote-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,cAAc,CAAC;AAIxE,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACxC,KAAK,cAAc,GAAG,OAAO,CAAC;AAI9B,UAAU,8BAA8B;IACtC,gBAAgB,IAAI,OAAO,CAAC;IAC5B,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC/F,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9F,SAAS,IAAI,OAAO,CAAC;IACrB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzF,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxF,QAAQ,IAAI,OAAO,CAAC;IACpB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACpF,mBAAmB,IAAI,OAAO,CAAC;IAC/B,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjH,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtF,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC7G;AAED,UAAU,eAAe;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;IACvE,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAC;IACjG,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,eAAe,GAAG,IAAI,CAAC;IAC/E,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;CAC7D;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,wBAAwB,GAChC,mCAAmC,CAcrC;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,oBAAoB,CAAC,EAC/E,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAuBnB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,oBAAoB,CAAC,EAC/E,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAcnB;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EACrG,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAanB;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EACrG,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAUnB;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EACrG,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAgBnB"}
+{"version":3,"file":"remote-routes.d.ts","sourceRoot":"","sources":["../src/remote-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAML,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAE5B,KAAK,cAAc,GAAG,OAAO,CAAC;AAO9B,UAAU,8BAA8B;IACtC,gBAAgB,IAAI,OAAO,CAAC;IAC5B,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC/F,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9F,SAAS,IAAI,OAAO,CAAC;IACrB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzF,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACzF,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxF,QAAQ,IAAI,OAAO,CAAC;IACpB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACpF,mBAAmB,IAAI,OAAO,CAAC;IAC/B,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjE,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjH,aAAa,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtF,SAAS,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,YAAY,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC7G;AAED,UAAU,eAAe;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAmED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,QAAQ,CAAC,CAAC;IACjG,QAAQ,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,eAAe,GAAG,IAAI,CAAC;IAC/E,QAAQ,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;CAC7D;AAyGD,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,wBAAwB,GAChC,mCAAmC,CAcrC;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,oBAAoB,CAAC,EAC/E,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,oBAAoB,CAAC,EAC/E,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAWnB;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EACrG,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAYnB;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EACrG,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAYnB;AAED,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,IAAI,CAAC,wBAAwB,EAAE,eAAe,GAAG,mBAAmB,GAAG,oBAAoB,CAAC,EACrG,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,QAAQ,CAAC,CAkBnB;AAsDD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,GACf;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,CA6BrF"}