@pellux/goodvibes-tui 0.18.11 → 0.18.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +72 -0
- package/README.md +1 -1
- package/docs/foundation-artifacts/operator-contract.json +1 -1
- package/package.json +2 -2
- package/src/config/index.ts +1 -138
- package/src/config/subscription-providers.ts +1 -127
- package/src/core/conversation-rendering.ts +5 -5
- package/src/core/conversation.ts +177 -424
- package/src/core/history.ts +45 -0
- package/src/core/orchestrator.ts +3 -733
- package/src/core/system-message-router.ts +19 -58
- package/src/input/command-registry.ts +3 -3
- package/src/input/commands/session-content.ts +2 -2
- package/src/input/commands/session-workflow.ts +1 -1
- package/src/input/handler-content-actions.ts +2 -2
- package/src/input/handler-feed.ts +2 -2
- package/src/input/handler-modal-token-routes.ts +1 -1
- package/src/input/handler-ui-state.ts +1 -1
- package/src/input/handler.ts +1 -1
- package/src/input/search.ts +1 -1
- package/src/input/selection.ts +2 -2
- package/src/input/session-picker-modal.ts +1 -1
- package/src/main.ts +1 -1
- package/src/panels/agent-inspector-panel.ts +3 -3
- package/src/panels/agent-logs-panel.ts +3 -3
- package/src/panels/approval-panel.ts +2 -2
- package/src/panels/automation-control-panel.ts +3 -3
- package/src/panels/base-panel.ts +14 -14
- package/src/panels/builtin/agent.ts +1 -0
- package/src/panels/builtin/operations.ts +2 -1
- package/src/panels/builtin/session.ts +2 -2
- package/src/panels/builtin/shared.ts +5 -5
- package/src/panels/cockpit-panel.ts +2 -2
- package/src/panels/communication-panel.ts +3 -3
- package/src/panels/context-visualizer-panel.ts +6 -3
- package/src/panels/control-plane-panel.ts +3 -3
- package/src/panels/cost-tracker-panel.ts +3 -3
- package/src/panels/debug-panel.ts +2 -2
- package/src/panels/diff-panel.ts +2 -2
- package/src/panels/docs-panel.ts +1 -1
- package/src/panels/eval-panel.ts +2 -2
- package/src/panels/file-explorer-panel.ts +3 -3
- package/src/panels/file-preview-panel.ts +3 -3
- package/src/panels/forensics-panel.ts +2 -2
- package/src/panels/git-panel.ts +1 -1
- package/src/panels/hooks-panel.ts +3 -3
- package/src/panels/incident-review-panel.ts +1 -1
- package/src/panels/intelligence-panel.ts +2 -2
- package/src/panels/knowledge-panel.ts +1 -1
- package/src/panels/local-auth-panel.ts +2 -2
- package/src/panels/marketplace-panel.ts +1 -1
- package/src/panels/mcp-panel.ts +3 -3
- package/src/panels/memory-panel.ts +1 -1
- package/src/panels/ops-control-panel.ts +3 -3
- package/src/panels/ops-strategy-panel.ts +2 -2
- package/src/panels/orchestration-panel.ts +2 -2
- package/src/panels/panel-list-panel.ts +6 -6
- package/src/panels/plan-dashboard-panel.ts +1 -1
- package/src/panels/plugins-panel.ts +2 -2
- package/src/panels/policy-panel.ts +2 -2
- package/src/panels/polish.ts +3 -3
- package/src/panels/provider-accounts-panel.ts +2 -2
- package/src/panels/provider-health-domains.ts +5 -1
- package/src/panels/provider-health-panel.ts +7 -3
- package/src/panels/provider-stats-panel.ts +3 -3
- package/src/panels/remote-panel.ts +3 -3
- package/src/panels/routes-panel.ts +3 -3
- package/src/panels/sandbox-panel.ts +2 -2
- package/src/panels/schedule-panel.ts +1 -1
- package/src/panels/security-panel.ts +2 -2
- package/src/panels/services-panel.ts +2 -2
- package/src/panels/session-browser-panel.ts +3 -3
- package/src/panels/settings-sync-panel.ts +2 -2
- package/src/panels/skills-panel.ts +6 -6
- package/src/panels/subscription-panel.ts +2 -2
- package/src/panels/symbol-outline-panel.ts +3 -3
- package/src/panels/system-messages-panel.ts +4 -4
- package/src/panels/tasks-panel.ts +2 -2
- package/src/panels/thinking-panel.ts +3 -3
- package/src/panels/token-budget-panel.ts +7 -3
- package/src/panels/tool-inspector-panel.ts +3 -3
- package/src/panels/types.ts +5 -5
- package/src/panels/watchers-panel.ts +3 -3
- package/src/panels/welcome-panel.ts +1 -1
- package/src/panels/worktree-panel.ts +2 -2
- package/src/panels/wrfc-panel.ts +3 -3
- package/src/permissions/prompt.ts +3 -22
- package/src/plugins/loader.ts +15 -304
- package/src/renderer/agent-detail-modal.ts +1 -1
- package/src/renderer/autocomplete-overlay.ts +2 -2
- package/src/renderer/bookmark-modal.ts +1 -1
- package/src/renderer/bottom-bar.ts +2 -2
- package/src/renderer/buffer.ts +1 -1
- package/src/renderer/code-block.ts +2 -2
- package/src/renderer/compositor.ts +2 -2
- package/src/renderer/context-inspector.ts +1 -1
- package/src/renderer/conversation-layout.ts +2 -2
- package/src/renderer/conversation-overlays.ts +1 -1
- package/src/renderer/conversation-surface.ts +2 -2
- package/src/renderer/diff-view.ts +2 -2
- package/src/renderer/diff.ts +1 -1
- package/src/renderer/file-picker-overlay.ts +2 -2
- package/src/renderer/file-tree.ts +2 -2
- package/src/renderer/help-overlay.ts +1 -1
- package/src/renderer/history-search-overlay.ts +2 -2
- package/src/renderer/live-tail-modal.ts +1 -1
- package/src/renderer/markdown.ts +2 -2
- package/src/renderer/modal-factory.ts +3 -3
- package/src/renderer/model-picker-overlay.ts +2 -2
- package/src/renderer/overlay-box.ts +2 -2
- package/src/renderer/panel-composite.ts +1 -1
- package/src/renderer/panel-picker-overlay.ts +2 -2
- package/src/renderer/panel-tab-bar.ts +1 -1
- package/src/renderer/panel-workspace-bar.ts +1 -1
- package/src/renderer/process-indicator.ts +2 -2
- package/src/renderer/process-modal.ts +1 -1
- package/src/renderer/profile-picker-modal.ts +2 -2
- package/src/renderer/progress.ts +2 -2
- package/src/renderer/search-overlay.ts +2 -2
- package/src/renderer/selection-modal-overlay.ts +2 -2
- package/src/renderer/session-picker-modal.ts +2 -2
- package/src/renderer/settings-modal.ts +2 -2
- package/src/renderer/shell-surface.ts +1 -1
- package/src/renderer/system-message.ts +1 -1
- package/src/renderer/tab-strip.ts +2 -2
- package/src/renderer/text-layout.ts +1 -1
- package/src/renderer/thinking.ts +1 -1
- package/src/renderer/tool-call.ts +2 -2
- package/src/renderer/ui-factory.ts +2 -2
- package/src/runtime/bootstrap-command-context.ts +7 -8
- package/src/runtime/bootstrap-command-parts.ts +4 -6
- package/src/runtime/bootstrap-core.ts +5 -4
- package/src/runtime/bootstrap-hook-bridge.ts +16 -175
- package/src/runtime/bootstrap-shell.ts +5 -5
- package/src/runtime/bootstrap.ts +6 -5
- package/src/runtime/context.ts +4 -20
- package/src/runtime/diagnostics/panels/index.ts +1 -1
- package/src/runtime/diagnostics/panels/ops.ts +1 -1
- package/src/runtime/diagnostics/panels/panel-resources.ts +118 -0
- package/src/runtime/perf/panel-contracts.ts +32 -0
- package/src/runtime/perf/panel-health-monitor.ts +18 -0
- package/src/runtime/services.ts +6 -6
- package/src/runtime/store/domains/conversation.ts +1 -181
- package/src/runtime/store/domains/permissions.ts +1 -143
- package/src/runtime/store/helpers/reducers/conversation.ts +1 -228
- package/src/runtime/store/helpers/reducers/lifecycle.ts +1 -440
- package/src/runtime/store/selectors/index.ts +11 -6
- package/src/runtime/store/state.ts +12 -4
- package/src/runtime/ui-read-models-observability-security.ts +2 -2
- package/src/runtime/ui-read-models-observability-system.ts +1 -1
- package/src/runtime/ui-service-queries.ts +1 -1
- package/src/runtime/ui-services.ts +1 -1
- package/src/shell/ui-openers.ts +1 -1
- package/src/tools/index.ts +1 -186
- package/src/types/grid.ts +48 -0
- package/src/utils/clipboard.ts +21 -0
- package/src/utils/splash-lines.ts +1 -1
- package/src/utils/terminal-width.ts +185 -0
- package/src/version.ts +1 -1
- package/src/acp/connection.ts +0 -447
- package/src/acp/index.ts +0 -7
- package/src/acp/manager.ts +0 -1
- package/src/adapters/bluebubbles/index.ts +0 -127
- package/src/adapters/discord/index.ts +0 -297
- package/src/adapters/github/index.ts +0 -73
- package/src/adapters/google-chat/index.ts +0 -119
- package/src/adapters/imessage/index.ts +0 -92
- package/src/adapters/index.ts +0 -15
- package/src/adapters/matrix/index.ts +0 -116
- package/src/adapters/mattermost/index.ts +0 -151
- package/src/adapters/msteams/index.ts +0 -180
- package/src/adapters/ntfy/index.ts +0 -118
- package/src/adapters/signal/index.ts +0 -92
- package/src/adapters/slack/index.ts +0 -323
- package/src/adapters/telegram/index.ts +0 -160
- package/src/adapters/types.ts +0 -97
- package/src/adapters/webhook/index.ts +0 -178
- package/src/adapters/whatsapp/index.ts +0 -135
- package/src/agents/message-bus-core.ts +0 -312
- package/src/agents/message-bus.ts +0 -2
- package/src/agents/orchestrator-prompts.ts +0 -351
- package/src/agents/orchestrator-runner.ts +0 -668
- package/src/agents/orchestrator.ts +0 -438
- package/src/agents/session.ts +0 -108
- package/src/agents/worktree.ts +0 -153
- package/src/agents/wrfc-config.ts +0 -47
- package/src/agents/wrfc-controller.ts +0 -747
- package/src/agents/wrfc-gate-runtime.ts +0 -75
- package/src/agents/wrfc-reporting.ts +0 -284
- package/src/agents/wrfc-runtime-events.ts +0 -150
- package/src/agents/wrfc-types.ts +0 -67
- package/src/automation/delivery-manager.ts +0 -368
- package/src/automation/index.ts +0 -72
- package/src/automation/manager-runtime-delivery.ts +0 -139
- package/src/automation/manager-runtime-events.ts +0 -131
- package/src/automation/manager-runtime-execution.ts +0 -511
- package/src/automation/manager-runtime-helpers.ts +0 -433
- package/src/automation/manager-runtime-job-mutations.ts +0 -175
- package/src/automation/manager-runtime-reconcile.ts +0 -148
- package/src/automation/manager-runtime-scheduling.ts +0 -189
- package/src/automation/manager-runtime-sync.ts +0 -54
- package/src/automation/manager-runtime.ts +0 -721
- package/src/automation/manager.ts +0 -10
- package/src/automation/service.ts +0 -242
- package/src/channels/builtin/account-actions.ts +0 -490
- package/src/channels/builtin/accounts.ts +0 -433
- package/src/channels/builtin/contracts.ts +0 -405
- package/src/channels/builtin/plugins.ts +0 -308
- package/src/channels/builtin/rendering.ts +0 -174
- package/src/channels/builtin/setup-schema.ts +0 -504
- package/src/channels/builtin/shared.ts +0 -96
- package/src/channels/builtin/surfaces.ts +0 -57
- package/src/channels/builtin/targets.ts +0 -693
- package/src/channels/builtin-runtime.ts +0 -443
- package/src/channels/delivery/shared.ts +0 -199
- package/src/channels/delivery/strategies-bridge.ts +0 -246
- package/src/channels/delivery/strategies-core.ts +0 -299
- package/src/channels/delivery/strategies-enterprise.ts +0 -178
- package/src/channels/delivery/types.ts +0 -59
- package/src/channels/delivery-router.ts +0 -127
- package/src/channels/index.ts +0 -77
- package/src/channels/plugin-registry.ts +0 -551
- package/src/channels/provider-runtime.ts +0 -330
- package/src/channels/reply-pipeline.ts +0 -522
- package/src/channels/route-manager.ts +0 -340
- package/src/channels/surface-registry.ts +0 -186
- package/src/config/helper-model.ts +0 -1
- package/src/config/manager.ts +0 -8
- package/src/config/subscription-auth.ts +0 -31
- package/src/config/tool-llm.ts +0 -110
- package/src/control-plane/approval-broker.ts +0 -351
- package/src/control-plane/gateway.ts +0 -1
- package/src/control-plane/index.ts +0 -54
- package/src/control-plane/media-contract-schemas.ts +0 -1
- package/src/control-plane/method-catalog-admin.ts +0 -1
- package/src/control-plane/method-catalog-channels.ts +0 -1
- package/src/control-plane/method-catalog-control-automation.ts +0 -1
- package/src/control-plane/method-catalog-control-core.ts +0 -1
- package/src/control-plane/method-catalog-control.ts +0 -1
- package/src/control-plane/method-catalog-events.ts +0 -1
- package/src/control-plane/method-catalog-knowledge.ts +0 -1
- package/src/control-plane/method-catalog-media.ts +0 -1
- package/src/control-plane/method-catalog-runtime.ts +0 -1
- package/src/control-plane/method-catalog-shared.ts +0 -1
- package/src/control-plane/method-catalog.ts +0 -1
- package/src/control-plane/operator-contract-schemas-admin.ts +0 -1
- package/src/control-plane/operator-contract-schemas-channels.ts +0 -1
- package/src/control-plane/operator-contract-schemas-control.ts +0 -1
- package/src/control-plane/operator-contract-schemas-domains.ts +0 -1
- package/src/control-plane/operator-contract-schemas-knowledge.ts +0 -1
- package/src/control-plane/operator-contract-schemas-media.ts +0 -1
- package/src/control-plane/operator-contract-schemas-permissions.ts +0 -1
- package/src/control-plane/operator-contract-schemas-remote.ts +0 -1
- package/src/control-plane/operator-contract-schemas-runtime.ts +0 -1
- package/src/control-plane/operator-contract-schemas-shared.ts +0 -1
- package/src/control-plane/operator-contract-schemas-telemetry.ts +0 -1
- package/src/control-plane/operator-contract-schemas.ts +0 -1
- package/src/control-plane/operator-contract.ts +0 -165
- package/src/control-plane/session-broker.ts +0 -780
- package/src/core/compaction-sections.ts +0 -492
- package/src/core/compaction-types.ts +0 -147
- package/src/core/context-compaction.ts +0 -542
- package/src/core/conversation-compaction.ts +0 -68
- package/src/core/conversation-diff.ts +0 -55
- package/src/core/conversation-utils.ts +0 -72
- package/src/core/event-replay.ts +0 -287
- package/src/core/orchestrator-context-runtime.ts +0 -407
- package/src/core/orchestrator-follow-up-runtime.ts +0 -134
- package/src/core/orchestrator-runtime.ts +0 -132
- package/src/core/orchestrator-tool-runtime.ts +0 -468
- package/src/core/orchestrator-turn-helpers.ts +0 -355
- package/src/core/orchestrator-turn-loop.ts +0 -443
- package/src/core/plan-command-handler.ts +0 -169
- package/src/core/transcript-events/classify.ts +0 -95
- package/src/core/transcript-events/index.ts +0 -15
- package/src/daemon/control-plane.ts +0 -522
- package/src/daemon/facade-composition.ts +0 -398
- package/src/daemon/facade.ts +0 -638
- package/src/daemon/helpers.ts +0 -74
- package/src/daemon/http/router-route-contexts.ts +0 -370
- package/src/daemon/http/router.ts +0 -531
- package/src/daemon/http-listener.ts +0 -301
- package/src/daemon/index.ts +0 -1
- package/src/daemon/server.ts +0 -1
- package/src/daemon/service-manager.ts +0 -413
- package/src/daemon/surface-actions.ts +0 -183
- package/src/daemon/surface-delivery.ts +0 -530
- package/src/daemon/surface-policy.ts +0 -60
- package/src/daemon/transport-events.ts +0 -110
- package/src/daemon/types.ts +0 -191
- package/src/export/markdown.ts +0 -213
- package/src/export/session-export.ts +0 -1
- package/src/git/index.ts +0 -1
- package/src/git/service.ts +0 -414
- package/src/hooks/chain-engine.ts +0 -414
- package/src/hooks/dispatcher.ts +0 -414
- package/src/hooks/hook-api.ts +0 -170
- package/src/hooks/index.ts +0 -48
- package/src/hooks/runners/agent.ts +0 -93
- package/src/hooks/runners/prompt.ts +0 -69
- package/src/hooks/workbench.ts +0 -360
- package/src/integrations/index.ts +0 -42
- package/src/integrations/notifier.ts +0 -206
- package/src/integrations/webhooks.ts +0 -1
- package/src/knowledge/consolidation.ts +0 -346
- package/src/knowledge/graphql.ts +0 -324
- package/src/knowledge/index.ts +0 -60
- package/src/knowledge/ingest-compile.ts +0 -386
- package/src/knowledge/ingest-context.ts +0 -18
- package/src/knowledge/ingest-inputs.ts +0 -387
- package/src/knowledge/ingest.ts +0 -1
- package/src/knowledge/internal.ts +0 -257
- package/src/knowledge/knowledge-api.ts +0 -432
- package/src/knowledge/lint.ts +0 -121
- package/src/knowledge/memory-sync.ts +0 -62
- package/src/knowledge/packet.ts +0 -370
- package/src/knowledge/scheduling.ts +0 -283
- package/src/knowledge/service.ts +0 -715
- package/src/mcp/client.ts +0 -383
- package/src/mcp/index.ts +0 -12
- package/src/mcp/mcp-api.ts +0 -90
- package/src/mcp/registry.ts +0 -1
- package/src/media/builtin-image-understanding.ts +0 -303
- package/src/media/builtin-providers.ts +0 -26
- package/src/media/index.ts +0 -18
- package/src/multimodal/index.ts +0 -13
- package/src/multimodal/service.ts +0 -492
- package/src/permissions/briefs/build.ts +0 -88
- package/src/permissions/manager.ts +0 -1
- package/src/plugins/api.ts +0 -383
- package/src/plugins/manager.ts +0 -481
- package/src/profiles/shape.ts +0 -58
- package/src/providers/amazon-bedrock-mantle.ts +0 -50
- package/src/providers/amazon-bedrock.ts +0 -61
- package/src/providers/anthropic-compat.ts +0 -373
- package/src/providers/anthropic-sdk-provider.ts +0 -230
- package/src/providers/anthropic-vertex.ts +0 -59
- package/src/providers/anthropic.ts +0 -469
- package/src/providers/auto-register.ts +0 -417
- package/src/providers/builtin-catalog.ts +0 -326
- package/src/providers/builtin-registry.ts +0 -575
- package/src/providers/cache-planner.ts +0 -258
- package/src/providers/capabilities.ts +0 -1
- package/src/providers/custom-loader.ts +0 -425
- package/src/providers/discovered-compat.ts +0 -7
- package/src/providers/discovered-factory.ts +0 -61
- package/src/providers/discovered-traits.ts +0 -138
- package/src/providers/gemini.ts +0 -462
- package/src/providers/github-copilot.ts +0 -254
- package/src/providers/index.ts +0 -1
- package/src/providers/interface.ts +0 -185
- package/src/providers/llama-cpp.ts +0 -402
- package/src/providers/lm-studio-helpers.ts +0 -367
- package/src/providers/lm-studio.ts +0 -484
- package/src/providers/model-catalog-cache.ts +0 -221
- package/src/providers/model-catalog-notifications.ts +0 -97
- package/src/providers/model-catalog-synthetic.ts +0 -202
- package/src/providers/model-catalog.ts +0 -211
- package/src/providers/model-limits.ts +0 -1
- package/src/providers/ollama.ts +0 -469
- package/src/providers/openai-codex.ts +0 -472
- package/src/providers/openai-compat.ts +0 -615
- package/src/providers/openai.ts +0 -231
- package/src/providers/optimizer.ts +0 -1
- package/src/providers/provider-api.ts +0 -1
- package/src/providers/registry-helpers.ts +0 -34
- package/src/providers/registry-models.ts +0 -77
- package/src/providers/registry-types.ts +0 -67
- package/src/providers/registry.ts +0 -1
- package/src/providers/runtime-metadata.ts +0 -149
- package/src/providers/runtime-snapshot.ts +0 -130
- package/src/providers/synthetic.ts +0 -561
- package/src/providers/tier-prompts.ts +0 -84
- package/src/providers/tool-formats.ts +0 -414
- package/src/runtime/auth/inspection.ts +0 -125
- package/src/runtime/bootstrap-background.ts +0 -157
- package/src/runtime/bootstrap-helpers.ts +0 -88
- package/src/runtime/bootstrap-runtime-events.ts +0 -254
- package/src/runtime/bootstrap-services.ts +0 -197
- package/src/runtime/compaction/index.ts +0 -1
- package/src/runtime/compaction/lifecycle.ts +0 -1
- package/src/runtime/compaction/manager.ts +0 -474
- package/src/runtime/compaction/quality-score.ts +0 -1
- package/src/runtime/compaction/resume-repair.ts +0 -1
- package/src/runtime/compaction/strategies/autocompact.ts +0 -1
- package/src/runtime/compaction/strategies/boundary-commit.ts +0 -1
- package/src/runtime/compaction/strategies/collapse.ts +0 -1
- package/src/runtime/compaction/strategies/index.ts +0 -1
- package/src/runtime/compaction/strategies/microcompact.ts +0 -1
- package/src/runtime/compaction/strategies/reactive.ts +0 -1
- package/src/runtime/compaction/types.ts +0 -1
- package/src/runtime/ecosystem/recommendations.ts +0 -117
- package/src/runtime/emitters/agents.ts +0 -96
- package/src/runtime/emitters/automation.ts +0 -112
- package/src/runtime/emitters/communication.ts +0 -53
- package/src/runtime/emitters/compaction.ts +0 -161
- package/src/runtime/emitters/control-plane.ts +0 -65
- package/src/runtime/emitters/deliveries.ts +0 -65
- package/src/runtime/emitters/forensics.ts +0 -17
- package/src/runtime/emitters/index.ts +0 -59
- package/src/runtime/emitters/knowledge.ts +0 -129
- package/src/runtime/emitters/mcp.ts +0 -95
- package/src/runtime/emitters/ops.ts +0 -163
- package/src/runtime/emitters/orchestration.ts +0 -87
- package/src/runtime/emitters/permissions.ts +0 -98
- package/src/runtime/emitters/planner.ts +0 -23
- package/src/runtime/emitters/plugins.ts +0 -78
- package/src/runtime/emitters/providers.ts +0 -30
- package/src/runtime/emitters/routes.ts +0 -57
- package/src/runtime/emitters/security.ts +0 -53
- package/src/runtime/emitters/session.ts +0 -93
- package/src/runtime/emitters/surfaces.ts +0 -57
- package/src/runtime/emitters/tasks.ts +0 -69
- package/src/runtime/emitters/tools.ts +0 -140
- package/src/runtime/emitters/transport.ts +0 -78
- package/src/runtime/emitters/turn.ts +0 -155
- package/src/runtime/emitters/ui.ts +0 -57
- package/src/runtime/emitters/watchers.ts +0 -57
- package/src/runtime/emitters/workflows.ts +0 -79
- package/src/runtime/eval/index.ts +0 -48
- package/src/runtime/eval/runner.ts +0 -163
- package/src/runtime/eval/suites.ts +0 -264
- package/src/runtime/events/domain-map.ts +0 -148
- package/src/runtime/events/index.ts +0 -1
- package/src/runtime/events/turn.ts +0 -1
- package/src/runtime/events/workflows.ts +0 -1
- package/src/runtime/forensics/collector.ts +0 -693
- package/src/runtime/forensics/index.ts +0 -23
- package/src/runtime/foundation-clients.ts +0 -78
- package/src/runtime/foundation-services.ts +0 -96
- package/src/runtime/guidance.ts +0 -183
- package/src/runtime/health/effect-handlers.ts +0 -189
- package/src/runtime/health/index.ts +0 -70
- package/src/runtime/health/wiring.ts +0 -115
- package/src/runtime/integration/helpers.ts +0 -640
- package/src/runtime/lifecycle.ts +0 -107
- package/src/runtime/mcp/index.ts +0 -68
- package/src/runtime/mcp/manager.ts +0 -513
- package/src/runtime/network/inbound.ts +0 -131
- package/src/runtime/network/index.ts +0 -30
- package/src/runtime/network/outbound.ts +0 -292
- package/src/runtime/network/shared.ts +0 -82
- package/src/runtime/operator-client.ts +0 -235
- package/src/runtime/ops/control-plane.ts +0 -363
- package/src/runtime/ops/index.ts +0 -122
- package/src/runtime/ops/playbooks/index.ts +0 -10
- package/src/runtime/ops/playbooks/session-unrecoverable.ts +0 -196
- package/src/runtime/ops/playbooks/stuck-turn.ts +0 -197
- package/src/runtime/ops/runtime-context.ts +0 -100
- package/src/runtime/ops-api.ts +0 -27
- package/src/runtime/orchestration/spawn-policy.ts +0 -83
- package/src/runtime/peer-client.ts +0 -404
- package/src/runtime/perf/index.ts +0 -57
- package/src/runtime/perf/slo-collector.ts +0 -375
- package/src/runtime/permissions/index.ts +0 -190
- package/src/runtime/permissions/policy-runtime.ts +0 -1
- package/src/runtime/permissions/preflight.ts +0 -101
- package/src/runtime/permissions/rule-suggestions.ts +0 -36
- package/src/runtime/plugins/hot-reload.ts +0 -221
- package/src/runtime/plugins/index.ts +0 -84
- package/src/runtime/plugins/lifecycle.ts +0 -95
- package/src/runtime/plugins/manager.ts +0 -474
- package/src/runtime/plugins/manifest.ts +0 -167
- package/src/runtime/plugins/quarantine.ts +0 -202
- package/src/runtime/plugins/trust.ts +0 -291
- package/src/runtime/plugins/types.ts +0 -205
- package/src/runtime/provider-accounts/registry.ts +0 -326
- package/src/runtime/remote/distributed-runtime-contract-schemas.ts +0 -386
- package/src/runtime/remote/index.ts +0 -488
- package/src/runtime/remote/runner-registry.ts +0 -438
- package/src/runtime/remote/supervisor.ts +0 -70
- package/src/runtime/runtime-hook-api.ts +0 -5
- package/src/runtime/runtime-knowledge-api.ts +0 -14
- package/src/runtime/runtime-mcp-api.ts +0 -5
- package/src/runtime/runtime-ops-api.ts +0 -86
- package/src/runtime/runtime-provider-api.ts +0 -18
- package/src/runtime/session-maintenance.ts +0 -188
- package/src/runtime/session-persistence.ts +0 -288
- package/src/runtime/session-return-context.ts +0 -195
- package/src/runtime/settings/control-plane-store.ts +0 -258
- package/src/runtime/settings/control-plane.ts +0 -599
- package/src/runtime/shell-command-extensions.ts +0 -54
- package/src/runtime/shell-command-ops.ts +0 -207
- package/src/runtime/shell-command-platform.ts +0 -47
- package/src/runtime/shell-command-services.ts +0 -143
- package/src/runtime/shell-command-workspace.ts +0 -31
- package/src/runtime/tasks/adapters/acp-adapter.ts +0 -211
- package/src/runtime/tasks/adapters/agent-adapter.ts +0 -208
- package/src/runtime/tasks/adapters/index.ts +0 -16
- package/src/runtime/tasks/adapters/process-adapter.ts +0 -214
- package/src/runtime/tasks/adapters/scheduler-adapter.ts +0 -193
- package/src/runtime/tasks/index.ts +0 -68
- package/src/runtime/tasks/manager.ts +0 -415
- package/src/runtime/telemetry/api-helpers.ts +0 -517
- package/src/runtime/telemetry/api.ts +0 -768
- package/src/runtime/telemetry/index.ts +0 -178
- package/src/runtime/telemetry/instrumentation/domain-bridge-agent-session.ts +0 -440
- package/src/runtime/telemetry/instrumentation/domain-bridge-plugin-mcp.ts +0 -200
- package/src/runtime/telemetry/instrumentation/domain-bridge-shared.ts +0 -18
- package/src/runtime/telemetry/instrumentation/domain-bridge-transport-task.ts +0 -204
- package/src/runtime/telemetry/instrumentation/domain-bridge.ts +0 -125
- package/src/runtime/telemetry/instrumentation/index.ts +0 -67
- package/src/runtime/tools/context.ts +0 -114
- package/src/runtime/tools/index.ts +0 -46
- package/src/runtime/tools/phased-executor.ts +0 -448
- package/src/runtime/tools/phases/budget.ts +0 -130
- package/src/runtime/tools/phases/execute.ts +0 -69
- package/src/runtime/tools/phases/index.ts +0 -13
- package/src/runtime/tools/phases/map-output.ts +0 -98
- package/src/runtime/tools/phases/permission.ts +0 -133
- package/src/runtime/tools/phases/posthook.ts +0 -57
- package/src/runtime/tools/phases/prehook.ts +0 -68
- package/src/runtime/tools/phases/validate.ts +0 -53
- package/src/runtime/transports/direct.ts +0 -73
- package/src/runtime/transports/http-helpers.ts +0 -218
- package/src/runtime/transports/http-types.ts +0 -364
- package/src/runtime/transports/http.ts +0 -629
- package/src/runtime/transports/realtime.ts +0 -50
- package/src/runtime/transports/remote-events.ts +0 -16
- package/src/runtime/transports/shared.ts +0 -39
- package/src/runtime/transports/ui-runtime-events.ts +0 -35
- package/src/runtime/ui-read-models-core.ts +0 -95
- package/src/runtime/ui-read-models-operations.ts +0 -203
- package/src/runtime/worktree/registry.ts +0 -252
- package/src/sessions/manager.ts +0 -14
- package/src/state/file-watcher.ts +0 -294
- package/src/state/index.ts +0 -56
- package/src/state/knowledge-injection.ts +0 -214
- package/src/state/memory-embedding-http.ts +0 -642
- package/src/state/memory-embeddings.ts +0 -312
- package/src/state/memory-ingest.ts +0 -132
- package/src/state/memory-registry.ts +0 -111
- package/src/state/memory-store-helpers.ts +0 -160
- package/src/state/memory-store.ts +0 -728
- package/src/state/memory-vector-store.ts +0 -418
- package/src/templates/manager.ts +0 -187
- package/src/tools/agent/index.ts +0 -610
- package/src/tools/agent/manager.ts +0 -476
- package/src/tools/analyze/git-modes.ts +0 -380
- package/src/tools/analyze/index.ts +0 -128
- package/src/tools/channel/agent-tools.ts +0 -16
- package/src/tools/channel/index.ts +0 -268
- package/src/tools/control/index.ts +0 -90
- package/src/tools/edit/core.ts +0 -619
- package/src/tools/edit/index.ts +0 -4
- package/src/tools/edit/phased.ts +0 -33
- package/src/tools/fetch/index.ts +0 -3
- package/src/tools/fetch/phased.ts +0 -34
- package/src/tools/fetch/runtime.ts +0 -499
- package/src/tools/mcp/index.ts +0 -190
- package/src/tools/remote-trigger/index.ts +0 -130
- package/src/tools/shared/auto-heal.ts +0 -282
- package/src/tools/state/index.ts +0 -688
- package/src/tools/web-search/index.ts +0 -38
- package/src/tools/write/index.ts +0 -604
- package/src/tools/write/phased.ts +0 -41
- package/src/types/generated/foundation-client-types.ts +0 -22
- package/src/watchers/index.ts +0 -11
- package/src/watchers/registry.ts +0 -517
- package/src/web-search/index.ts +0 -26
- package/src/web-search/provider-registry.ts +0 -64
- package/src/web-search/providers/brave.ts +0 -100
- package/src/web-search/providers/duckduckgo.ts +0 -270
- package/src/web-search/providers/exa.ts +0 -77
- package/src/web-search/providers/firecrawl.ts +0 -90
- package/src/web-search/providers/perplexity.ts +0 -86
- package/src/web-search/providers/searxng.ts +0 -88
- package/src/web-search/providers/shared.ts +0 -249
- package/src/web-search/providers/tavily.ts +0 -90
- package/src/web-search/service.ts +0 -142
|
@@ -1,95 +0,0 @@
|
|
|
1
|
-
import type { ToolCall } from '@pellux/goodvibes-sdk/platform/types/tools';
|
|
2
|
-
import type { TranscriptEvent } from '@pellux/goodvibes-sdk/platform/core/transcript-events/types';
|
|
3
|
-
import type { ConversationMessageSnapshot } from '../conversation';
|
|
4
|
-
|
|
5
|
-
function summarizeText(text: string, max = 96): string {
|
|
6
|
-
const normalized = text.replace(/\s+/g, ' ').trim();
|
|
7
|
-
return normalized.length <= max ? normalized : `${normalized.slice(0, max - 3)}...`;
|
|
8
|
-
}
|
|
9
|
-
|
|
10
|
-
function classifySystemKind(text: string): TranscriptEvent['kind'] {
|
|
11
|
-
if (text.includes('[Remote]') || text.includes('[Teleport]') || text.includes('[Bridge]')) return 'remote_status';
|
|
12
|
-
if (text.includes('[WRFC]') || text.includes('[Review]')) return 'review_state';
|
|
13
|
-
if (text.includes('[Policy]') || text.includes('[Security]')) return 'policy_warning';
|
|
14
|
-
if (text.includes('[Health]') || text.includes('[Local]') || text.includes('[Scan]') || text.includes('[Forensics]')) return 'diagnostic_notice';
|
|
15
|
-
if (text.includes('[Session]') || text.includes('[Recovery]') || text.includes('[Resume]')) return 'session_restore';
|
|
16
|
-
if (text.includes('[Approval]')) {
|
|
17
|
-
return /(allowed|approved|denied|rejected|granted)/i.test(text) ? 'approval_resolution' : 'approval_request';
|
|
18
|
-
}
|
|
19
|
-
if (text.includes('[Task]') || text.includes('[Tasks]') || text.includes('[Agent]')) return 'task_transition';
|
|
20
|
-
return 'system_notice';
|
|
21
|
-
}
|
|
22
|
-
|
|
23
|
-
function toolCallEvents(messageIndex: number, toolCalls: readonly ToolCall[]): TranscriptEvent[] {
|
|
24
|
-
return toolCalls.map((call, index) => ({
|
|
25
|
-
id: `msg-${messageIndex}-tool-call-${index}`,
|
|
26
|
-
kind: 'tool_call',
|
|
27
|
-
messageIndex,
|
|
28
|
-
groupKey: `tool:${call.id}`,
|
|
29
|
-
title: call.name,
|
|
30
|
-
detail: summarizeText(JSON.stringify(call.arguments ?? {})),
|
|
31
|
-
relatedCallId: call.id,
|
|
32
|
-
}));
|
|
33
|
-
}
|
|
34
|
-
|
|
35
|
-
export function classifyTranscriptMessages(messages: readonly ConversationMessageSnapshot[]): TranscriptEvent[] {
|
|
36
|
-
const events: TranscriptEvent[] = [];
|
|
37
|
-
messages.forEach((message, messageIndex) => {
|
|
38
|
-
switch (message.role) {
|
|
39
|
-
case 'user': {
|
|
40
|
-
const content = typeof message.content === 'string'
|
|
41
|
-
? message.content
|
|
42
|
-
: message.content.map((part) => part.type === 'text' ? part.text : '[image]').join(' ');
|
|
43
|
-
events.push({
|
|
44
|
-
id: `msg-${messageIndex}-user`,
|
|
45
|
-
kind: 'user_input',
|
|
46
|
-
messageIndex,
|
|
47
|
-
groupKey: `user:${messageIndex}`,
|
|
48
|
-
title: 'User input',
|
|
49
|
-
detail: summarizeText(content),
|
|
50
|
-
});
|
|
51
|
-
break;
|
|
52
|
-
}
|
|
53
|
-
case 'assistant': {
|
|
54
|
-
if (message.content.trim()) {
|
|
55
|
-
events.push({
|
|
56
|
-
id: `msg-${messageIndex}-assistant`,
|
|
57
|
-
kind: 'assistant_output',
|
|
58
|
-
messageIndex,
|
|
59
|
-
groupKey: `assistant:${messageIndex}`,
|
|
60
|
-
title: 'Assistant output',
|
|
61
|
-
detail: summarizeText(message.content),
|
|
62
|
-
});
|
|
63
|
-
}
|
|
64
|
-
if (message.toolCalls?.length) {
|
|
65
|
-
events.push(...toolCallEvents(messageIndex, message.toolCalls));
|
|
66
|
-
}
|
|
67
|
-
break;
|
|
68
|
-
}
|
|
69
|
-
case 'tool':
|
|
70
|
-
events.push({
|
|
71
|
-
id: `msg-${messageIndex}-tool-result`,
|
|
72
|
-
kind: 'tool_result',
|
|
73
|
-
messageIndex,
|
|
74
|
-
groupKey: `tool:${message.callId}`,
|
|
75
|
-
title: message.toolName ?? 'Tool result',
|
|
76
|
-
detail: summarizeText(message.content),
|
|
77
|
-
relatedCallId: message.callId,
|
|
78
|
-
});
|
|
79
|
-
break;
|
|
80
|
-
case 'system': {
|
|
81
|
-
const kind = classifySystemKind(message.content);
|
|
82
|
-
events.push({
|
|
83
|
-
id: `msg-${messageIndex}-system`,
|
|
84
|
-
kind,
|
|
85
|
-
messageIndex,
|
|
86
|
-
groupKey: `${kind}:${messageIndex}`,
|
|
87
|
-
title: kind.replace(/_/g, ' '),
|
|
88
|
-
detail: summarizeText(message.content),
|
|
89
|
-
});
|
|
90
|
-
break;
|
|
91
|
-
}
|
|
92
|
-
}
|
|
93
|
-
});
|
|
94
|
-
return events;
|
|
95
|
-
}
|
|
@@ -1,15 +0,0 @@
|
|
|
1
|
-
import { classifyTranscriptMessages } from '@pellux/goodvibes-sdk/platform/core/transcript-events/classify';
|
|
2
|
-
import { groupTranscriptEvents } from '@pellux/goodvibes-sdk/platform/core/transcript-events/grouping';
|
|
3
|
-
import type { ConversationMessageSnapshot } from '../conversation';
|
|
4
|
-
|
|
5
|
-
export { classifyTranscriptMessages } from '@pellux/goodvibes-sdk/platform/core/transcript-events/classify';
|
|
6
|
-
export { groupTranscriptEvents } from '@pellux/goodvibes-sdk/platform/core/transcript-events/grouping';
|
|
7
|
-
export type { TranscriptEvent, TranscriptEventKind } from '@pellux/goodvibes-sdk/platform/core/transcript-events/types';
|
|
8
|
-
export type { TranscriptEventGroup } from '@pellux/goodvibes-sdk/platform/core/transcript-events/grouping';
|
|
9
|
-
|
|
10
|
-
export function buildTranscriptEventIndex(messages: readonly ConversationMessageSnapshot[]) {
|
|
11
|
-
const events = classifyTranscriptMessages(messages);
|
|
12
|
-
const groups = groupTranscriptEvents(events);
|
|
13
|
-
return { events, groups };
|
|
14
|
-
}
|
|
15
|
-
|
|
@@ -1,522 +0,0 @@
|
|
|
1
|
-
import type { AgentManager } from '@pellux/goodvibes-sdk/platform/tools/agent/index';
|
|
2
|
-
import type { UserAuthManager } from '@pellux/goodvibes-sdk/platform/security/user-auth';
|
|
3
|
-
import {
|
|
4
|
-
authenticateOperatorRequest,
|
|
5
|
-
authenticateOperatorToken,
|
|
6
|
-
extractOperatorAuthToken,
|
|
7
|
-
isOperatorAdmin,
|
|
8
|
-
} from '@pellux/goodvibes-sdk/platform/security/http-auth';
|
|
9
|
-
import type { ControlPlaneGateway, SharedSessionBroker } from '@pellux/goodvibes-sdk/platform/control-plane/index';
|
|
10
|
-
import type { GatewayMethodCatalog, GatewayMethodDescriptor } from '@pellux/goodvibes-sdk/platform/control-plane/index';
|
|
11
|
-
import type { RuntimeEventDomain } from '@pellux/goodvibes-sdk/platform/runtime/events/index';
|
|
12
|
-
import type { DistributedRuntimeManager } from '@pellux/goodvibes-sdk/platform/runtime/remote/index';
|
|
13
|
-
import { extractForwardedClientIp } from '@pellux/goodvibes-sdk/platform/runtime/network/index';
|
|
14
|
-
import { resolveGatewayPathTemplate } from '@pellux/goodvibes-sdk/platform/daemon/helpers';
|
|
15
|
-
import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
|
|
16
|
-
import {
|
|
17
|
-
buildMissingScopeBody,
|
|
18
|
-
resolveAuthenticatedPrincipal,
|
|
19
|
-
type AuthenticatedPrincipal,
|
|
20
|
-
} from '@pellux/goodvibes-sdk/platform/daemon/http-policy';
|
|
21
|
-
|
|
22
|
-
export interface ControlPlaneWebSocketData {
|
|
23
|
-
readonly channel: 'control-plane';
|
|
24
|
-
authToken: string;
|
|
25
|
-
principalId: string | null;
|
|
26
|
-
principalKind: 'user' | 'bot' | 'service' | 'token' | null;
|
|
27
|
-
admin: boolean;
|
|
28
|
-
scopes: readonly string[];
|
|
29
|
-
readonly domains: readonly RuntimeEventDomain[];
|
|
30
|
-
readonly clientKind:
|
|
31
|
-
| 'tui'
|
|
32
|
-
| 'web'
|
|
33
|
-
| 'slack'
|
|
34
|
-
| 'discord'
|
|
35
|
-
| 'ntfy'
|
|
36
|
-
| 'webhook'
|
|
37
|
-
| 'telegram'
|
|
38
|
-
| 'google-chat'
|
|
39
|
-
| 'signal'
|
|
40
|
-
| 'whatsapp'
|
|
41
|
-
| 'imessage'
|
|
42
|
-
| 'msteams'
|
|
43
|
-
| 'bluebubbles'
|
|
44
|
-
| 'mattermost'
|
|
45
|
-
| 'matrix'
|
|
46
|
-
| 'daemon';
|
|
47
|
-
readonly remoteAddress?: string;
|
|
48
|
-
clientId?: string;
|
|
49
|
-
authenticated: boolean;
|
|
50
|
-
}
|
|
51
|
-
|
|
52
|
-
export interface DaemonControlPlaneContext {
|
|
53
|
-
readonly authToken: () => string | null;
|
|
54
|
-
readonly userAuth: UserAuthManager;
|
|
55
|
-
readonly agentManager: AgentManager;
|
|
56
|
-
readonly controlPlaneGateway: ControlPlaneGateway;
|
|
57
|
-
readonly gatewayMethods: GatewayMethodCatalog;
|
|
58
|
-
readonly distributedRuntime: DistributedRuntimeManager;
|
|
59
|
-
readonly host: string;
|
|
60
|
-
readonly port: number;
|
|
61
|
-
readonly trustProxyEnabled: () => boolean;
|
|
62
|
-
readonly dispatchApiRoutes: (req: Request) => Promise<Response | null>;
|
|
63
|
-
readonly parseJsonBody: (req: Request) => Promise<Record<string, unknown> | Response>;
|
|
64
|
-
readonly requireAuthenticatedSession: (req: Request) => { username: string; roles: readonly string[] } | null;
|
|
65
|
-
}
|
|
66
|
-
|
|
67
|
-
interface UpgradeCapableServer {
|
|
68
|
-
upgrade(req: Request, options?: { data?: unknown }): boolean;
|
|
69
|
-
}
|
|
70
|
-
|
|
71
|
-
export class DaemonControlPlaneHelper {
|
|
72
|
-
constructor(private readonly context: DaemonControlPlaneContext) {}
|
|
73
|
-
|
|
74
|
-
private trustProxyEnabled(): boolean {
|
|
75
|
-
return this.context.trustProxyEnabled();
|
|
76
|
-
}
|
|
77
|
-
|
|
78
|
-
extractAuthToken(req: Request): string {
|
|
79
|
-
return extractOperatorAuthToken(req);
|
|
80
|
-
}
|
|
81
|
-
|
|
82
|
-
checkAuth(req: Request): boolean {
|
|
83
|
-
return authenticateOperatorRequest(req, {
|
|
84
|
-
sharedToken: this.context.authToken(),
|
|
85
|
-
userAuth: this.context.userAuth,
|
|
86
|
-
}) !== null;
|
|
87
|
-
}
|
|
88
|
-
|
|
89
|
-
requireAuthenticatedSession(req: Request): { username: string; roles: readonly string[] } | null {
|
|
90
|
-
const authenticated = authenticateOperatorRequest(req, {
|
|
91
|
-
sharedToken: this.context.authToken(),
|
|
92
|
-
userAuth: this.context.userAuth,
|
|
93
|
-
});
|
|
94
|
-
if (!authenticated || authenticated.kind !== 'session') return null;
|
|
95
|
-
return {
|
|
96
|
-
username: authenticated.username,
|
|
97
|
-
roles: authenticated.roles,
|
|
98
|
-
};
|
|
99
|
-
}
|
|
100
|
-
|
|
101
|
-
requireAdmin(req: Request): Response | null {
|
|
102
|
-
const authenticated = authenticateOperatorRequest(req, {
|
|
103
|
-
sharedToken: this.context.authToken(),
|
|
104
|
-
userAuth: this.context.userAuth,
|
|
105
|
-
});
|
|
106
|
-
if (!authenticated) return Response.json({ error: 'Unauthorized' }, { status: 401 });
|
|
107
|
-
if (!isOperatorAdmin(authenticated)) {
|
|
108
|
-
return Response.json({ error: 'Admin role required' }, { status: 403 });
|
|
109
|
-
}
|
|
110
|
-
return null;
|
|
111
|
-
}
|
|
112
|
-
|
|
113
|
-
async requireRemotePeer(req: Request, scope?: string): Promise<import('../runtime/remote/index.ts').DistributedPeerAuth | Response> {
|
|
114
|
-
const token = this.extractAuthToken(req);
|
|
115
|
-
const auth = await this.context.distributedRuntime.authenticatePeerToken(
|
|
116
|
-
token,
|
|
117
|
-
extractForwardedClientIp(req, this.trustProxyEnabled()),
|
|
118
|
-
);
|
|
119
|
-
if (!auth) {
|
|
120
|
-
return Response.json({ error: 'Unauthorized remote peer' }, { status: 401 });
|
|
121
|
-
}
|
|
122
|
-
if (scope && !auth.token.scopes.includes(scope)) {
|
|
123
|
-
return Response.json({ error: `Remote peer token missing required scope: ${scope}` }, { status: 403 });
|
|
124
|
-
}
|
|
125
|
-
return auth;
|
|
126
|
-
}
|
|
127
|
-
|
|
128
|
-
describeAuthenticatedPrincipal(token: string): AuthenticatedPrincipal | null {
|
|
129
|
-
const authenticated = authenticateOperatorToken(token, {
|
|
130
|
-
sharedToken: this.context.authToken(),
|
|
131
|
-
userAuth: this.context.userAuth,
|
|
132
|
-
});
|
|
133
|
-
if (!authenticated) return null;
|
|
134
|
-
if (authenticated.kind === 'shared-token') {
|
|
135
|
-
return {
|
|
136
|
-
principalId: 'shared-token',
|
|
137
|
-
principalKind: 'token',
|
|
138
|
-
admin: true,
|
|
139
|
-
scopes: this.getGrantedGatewayScopes(true),
|
|
140
|
-
};
|
|
141
|
-
}
|
|
142
|
-
const admin = authenticated.roles.includes('admin');
|
|
143
|
-
return {
|
|
144
|
-
principalId: authenticated.username,
|
|
145
|
-
principalKind: 'user',
|
|
146
|
-
admin,
|
|
147
|
-
scopes: this.getGrantedGatewayScopes(admin),
|
|
148
|
-
};
|
|
149
|
-
}
|
|
150
|
-
|
|
151
|
-
getGrantedGatewayScopes(includeWrite: boolean): readonly string[] {
|
|
152
|
-
const scopes = new Set(this.context.gatewayMethods.getAllScopes({ includeWrite }));
|
|
153
|
-
scopes.add('read:events');
|
|
154
|
-
scopes.add('read:control-plane');
|
|
155
|
-
scopes.add('read:telemetry');
|
|
156
|
-
if (includeWrite) scopes.add('read:telemetry-sensitive');
|
|
157
|
-
if (includeWrite) scopes.add('write:control-plane');
|
|
158
|
-
return [...scopes].sort();
|
|
159
|
-
}
|
|
160
|
-
|
|
161
|
-
validateGatewayInvocation(
|
|
162
|
-
descriptor: GatewayMethodDescriptor,
|
|
163
|
-
context?: {
|
|
164
|
-
readonly principalKind?: 'user' | 'bot' | 'service' | 'token' | 'remote-peer';
|
|
165
|
-
readonly scopes?: readonly string[];
|
|
166
|
-
readonly admin?: boolean;
|
|
167
|
-
},
|
|
168
|
-
): { status: number; ok: false; body: Record<string, unknown> } | null {
|
|
169
|
-
if (descriptor.invokable === false) {
|
|
170
|
-
return {
|
|
171
|
-
status: 400,
|
|
172
|
-
ok: false,
|
|
173
|
-
body: {
|
|
174
|
-
error: `Gateway method is cataloged but not invokable through method dispatch: ${descriptor.id}`,
|
|
175
|
-
},
|
|
176
|
-
};
|
|
177
|
-
}
|
|
178
|
-
if (descriptor.access === 'public') {
|
|
179
|
-
return null;
|
|
180
|
-
}
|
|
181
|
-
if (descriptor.access === 'admin' && !context?.admin) {
|
|
182
|
-
return {
|
|
183
|
-
status: 403,
|
|
184
|
-
ok: false,
|
|
185
|
-
body: { error: `Gateway method requires admin access: ${descriptor.id}` },
|
|
186
|
-
};
|
|
187
|
-
}
|
|
188
|
-
if (descriptor.access === 'remote-peer' && context?.principalKind !== 'remote-peer') {
|
|
189
|
-
return {
|
|
190
|
-
status: 403,
|
|
191
|
-
ok: false,
|
|
192
|
-
body: { error: `Gateway method requires a remote-peer principal: ${descriptor.id}` },
|
|
193
|
-
};
|
|
194
|
-
}
|
|
195
|
-
const body = buildMissingScopeBody(descriptor.id, descriptor.scopes, context?.scopes);
|
|
196
|
-
if (body) {
|
|
197
|
-
return {
|
|
198
|
-
status: 403,
|
|
199
|
-
ok: false,
|
|
200
|
-
body,
|
|
201
|
-
};
|
|
202
|
-
}
|
|
203
|
-
return null;
|
|
204
|
-
}
|
|
205
|
-
|
|
206
|
-
tryUpgradeControlPlaneWebSocket(
|
|
207
|
-
req: Request,
|
|
208
|
-
server: UpgradeCapableServer,
|
|
209
|
-
): Response | 'upgraded' | null {
|
|
210
|
-
const url = new URL(req.url);
|
|
211
|
-
if (url.pathname !== '/api/control-plane/ws' || req.method !== 'GET') {
|
|
212
|
-
return null;
|
|
213
|
-
}
|
|
214
|
-
const token = this.extractAuthToken(req);
|
|
215
|
-
const principal = resolveAuthenticatedPrincipal(req, this);
|
|
216
|
-
if (token && !principal) {
|
|
217
|
-
return Response.json({ error: 'Unauthorized' }, { status: 401 });
|
|
218
|
-
}
|
|
219
|
-
const rawDomains = url.searchParams.get('domains');
|
|
220
|
-
const domains = (rawDomains ? rawDomains.split(',').map((value) => value.trim()).filter(Boolean) : []) as RuntimeEventDomain[];
|
|
221
|
-
const requestedKind = url.searchParams.get('clientKind');
|
|
222
|
-
const clientKind = requestedKind === 'tui'
|
|
223
|
-
|| requestedKind === 'web'
|
|
224
|
-
|| requestedKind === 'slack'
|
|
225
|
-
|| requestedKind === 'discord'
|
|
226
|
-
|| requestedKind === 'ntfy'
|
|
227
|
-
|| requestedKind === 'daemon'
|
|
228
|
-
|| requestedKind === 'webhook'
|
|
229
|
-
? requestedKind
|
|
230
|
-
: 'web';
|
|
231
|
-
const upgraded = server.upgrade(req, {
|
|
232
|
-
data: {
|
|
233
|
-
channel: 'control-plane',
|
|
234
|
-
authToken: token,
|
|
235
|
-
principalId: principal?.principalId ?? null,
|
|
236
|
-
principalKind: principal?.principalKind ?? null,
|
|
237
|
-
scopes: principal?.scopes ?? [],
|
|
238
|
-
admin: principal?.admin ?? false,
|
|
239
|
-
domains,
|
|
240
|
-
clientKind,
|
|
241
|
-
remoteAddress: extractForwardedClientIp(req, this.trustProxyEnabled()),
|
|
242
|
-
authenticated: Boolean(principal),
|
|
243
|
-
} satisfies ControlPlaneWebSocketData,
|
|
244
|
-
});
|
|
245
|
-
return upgraded ? 'upgraded' : Response.json({ error: 'WebSocket upgrade failed' }, { status: 400 });
|
|
246
|
-
}
|
|
247
|
-
|
|
248
|
-
handleControlPlaneWebSocketOpen(ws: {
|
|
249
|
-
data: ControlPlaneWebSocketData;
|
|
250
|
-
send(message: string): void;
|
|
251
|
-
}): void {
|
|
252
|
-
const connection = this.context.controlPlaneGateway.openWebSocketClient({
|
|
253
|
-
clientKind: ws.data.clientKind,
|
|
254
|
-
transport: 'ws',
|
|
255
|
-
domains: ws.data.authenticated ? ws.data.domains : [],
|
|
256
|
-
...(ws.data.principalId ? { principalId: ws.data.principalId } : {}),
|
|
257
|
-
...(ws.data.principalKind ? { principalKind: ws.data.principalKind } : {}),
|
|
258
|
-
...(ws.data.scopes.length > 0 ? { scopes: ws.data.scopes } : {}),
|
|
259
|
-
remoteAddress: ws.data.remoteAddress,
|
|
260
|
-
}, (event, payload) => {
|
|
261
|
-
ws.send(JSON.stringify({ type: 'event', event, payload }));
|
|
262
|
-
});
|
|
263
|
-
ws.data.clientId = connection.clientId;
|
|
264
|
-
}
|
|
265
|
-
|
|
266
|
-
async handleControlPlaneWebSocketMessage(
|
|
267
|
-
ws: {
|
|
268
|
-
data: ControlPlaneWebSocketData;
|
|
269
|
-
send(message: string): void;
|
|
270
|
-
},
|
|
271
|
-
message: string | Buffer | ArrayBuffer | Uint8Array,
|
|
272
|
-
): Promise<void> {
|
|
273
|
-
const clientId = ws.data.clientId;
|
|
274
|
-
if (!clientId) return;
|
|
275
|
-
const text = typeof message === 'string'
|
|
276
|
-
? message
|
|
277
|
-
: message instanceof Uint8Array
|
|
278
|
-
? new TextDecoder().decode(message)
|
|
279
|
-
: message instanceof ArrayBuffer
|
|
280
|
-
? new TextDecoder().decode(new Uint8Array(message))
|
|
281
|
-
: Buffer.from(message).toString('utf8');
|
|
282
|
-
let frame: Record<string, unknown>;
|
|
283
|
-
try {
|
|
284
|
-
frame = JSON.parse(text) as Record<string, unknown>;
|
|
285
|
-
} catch {
|
|
286
|
-
ws.send(JSON.stringify({ type: 'error', error: 'Invalid JSON frame' }));
|
|
287
|
-
return;
|
|
288
|
-
}
|
|
289
|
-
|
|
290
|
-
this.context.controlPlaneGateway.touchWebSocketClient(clientId, {
|
|
291
|
-
lastFrameType: typeof frame.type === 'string' ? frame.type : 'unknown',
|
|
292
|
-
});
|
|
293
|
-
|
|
294
|
-
if (frame.type === 'ping') {
|
|
295
|
-
ws.send(JSON.stringify({ type: 'pong', ts: Date.now() }));
|
|
296
|
-
return;
|
|
297
|
-
}
|
|
298
|
-
|
|
299
|
-
if (frame.type === 'auth') {
|
|
300
|
-
const token = typeof frame.token === 'string' ? frame.token : ws.data.authToken;
|
|
301
|
-
const principal = this.describeAuthenticatedPrincipal(token);
|
|
302
|
-
if (!principal) {
|
|
303
|
-
ws.send(JSON.stringify({ type: 'auth', ok: false, error: 'Unauthorized' }));
|
|
304
|
-
return;
|
|
305
|
-
}
|
|
306
|
-
this.context.controlPlaneGateway.authenticateClient(clientId, {
|
|
307
|
-
principalId: principal.principalId,
|
|
308
|
-
principalKind: principal.principalKind,
|
|
309
|
-
scopes: principal.scopes,
|
|
310
|
-
...(typeof frame.label === 'string' ? { label: frame.label } : {}),
|
|
311
|
-
...(Array.isArray(frame.capabilities) ? { capabilities: frame.capabilities.filter((value): value is string => typeof value === 'string') } : {}),
|
|
312
|
-
});
|
|
313
|
-
if (Array.isArray(frame.domains)) {
|
|
314
|
-
this.context.controlPlaneGateway.subscribeWebSocketClient(
|
|
315
|
-
clientId,
|
|
316
|
-
frame.domains.filter((value): value is RuntimeEventDomain => typeof value === 'string') as RuntimeEventDomain[],
|
|
317
|
-
);
|
|
318
|
-
}
|
|
319
|
-
ws.data.authToken = token;
|
|
320
|
-
ws.data.principalId = principal.principalId;
|
|
321
|
-
ws.data.principalKind = principal.principalKind;
|
|
322
|
-
ws.data.scopes = principal.scopes;
|
|
323
|
-
ws.data.admin = principal.admin;
|
|
324
|
-
ws.data.authenticated = true;
|
|
325
|
-
ws.send(JSON.stringify({ type: 'auth', ok: true, clientId, principalId: principal.principalId }));
|
|
326
|
-
return;
|
|
327
|
-
}
|
|
328
|
-
|
|
329
|
-
if (frame.type === 'subscribe') {
|
|
330
|
-
if (!ws.data.authenticated) {
|
|
331
|
-
ws.send(JSON.stringify({ type: 'error', error: 'Authenticate before subscribing' }));
|
|
332
|
-
return;
|
|
333
|
-
}
|
|
334
|
-
const domains = Array.isArray(frame.domains)
|
|
335
|
-
? frame.domains.filter((value): value is RuntimeEventDomain => typeof value === 'string') as RuntimeEventDomain[]
|
|
336
|
-
: [];
|
|
337
|
-
this.context.controlPlaneGateway.subscribeWebSocketClient(clientId, domains);
|
|
338
|
-
ws.send(JSON.stringify({ type: 'subscribed', clientId, domains }));
|
|
339
|
-
return;
|
|
340
|
-
}
|
|
341
|
-
|
|
342
|
-
if (frame.type === 'unsubscribe') {
|
|
343
|
-
const domains = Array.isArray(frame.domains)
|
|
344
|
-
? frame.domains.filter((value): value is RuntimeEventDomain => typeof value === 'string') as RuntimeEventDomain[]
|
|
345
|
-
: undefined;
|
|
346
|
-
this.context.controlPlaneGateway.unsubscribeWebSocketClient(clientId, domains);
|
|
347
|
-
ws.send(JSON.stringify({ type: 'unsubscribed', clientId, domains: domains ?? [] }));
|
|
348
|
-
return;
|
|
349
|
-
}
|
|
350
|
-
|
|
351
|
-
if (frame.type === 'call') {
|
|
352
|
-
if (!ws.data.authenticated || !ws.data.principalId || !ws.data.principalKind) {
|
|
353
|
-
ws.send(JSON.stringify({ type: 'error', error: 'Authenticate before invoking methods' }));
|
|
354
|
-
return;
|
|
355
|
-
}
|
|
356
|
-
const id = typeof frame.id === 'string' ? frame.id : `call-${Date.now()}`;
|
|
357
|
-
const methodId = typeof frame.methodId === 'string' ? frame.methodId : undefined;
|
|
358
|
-
const response = methodId
|
|
359
|
-
? await this.invokeGatewayMethodCall({
|
|
360
|
-
authToken: ws.data.authToken,
|
|
361
|
-
methodId,
|
|
362
|
-
query: typeof frame.query === 'object' && frame.query !== null ? frame.query as Record<string, unknown> : undefined,
|
|
363
|
-
body: frame.body,
|
|
364
|
-
context: {
|
|
365
|
-
principalId: ws.data.principalId,
|
|
366
|
-
principalKind: ws.data.principalKind,
|
|
367
|
-
admin: ws.data.admin,
|
|
368
|
-
scopes: ws.data.scopes,
|
|
369
|
-
clientKind: ws.data.clientKind,
|
|
370
|
-
},
|
|
371
|
-
})
|
|
372
|
-
: await this.invokeWebSocketControlPlaneCall({
|
|
373
|
-
authToken: ws.data.authToken,
|
|
374
|
-
method: typeof frame.method === 'string' ? frame.method.toUpperCase() : 'GET',
|
|
375
|
-
path: typeof frame.path === 'string' ? frame.path : '/api/control-plane',
|
|
376
|
-
query: typeof frame.query === 'object' && frame.query !== null ? frame.query as Record<string, unknown> : undefined,
|
|
377
|
-
body: frame.body,
|
|
378
|
-
context: {
|
|
379
|
-
principalKind: ws.data.principalKind,
|
|
380
|
-
admin: ws.data.admin,
|
|
381
|
-
scopes: ws.data.scopes,
|
|
382
|
-
},
|
|
383
|
-
});
|
|
384
|
-
ws.send(JSON.stringify({
|
|
385
|
-
type: 'response',
|
|
386
|
-
id,
|
|
387
|
-
ok: response.ok,
|
|
388
|
-
status: response.status,
|
|
389
|
-
body: response.body,
|
|
390
|
-
}));
|
|
391
|
-
return;
|
|
392
|
-
}
|
|
393
|
-
|
|
394
|
-
ws.send(JSON.stringify({ type: 'error', error: 'Unsupported frame type' }));
|
|
395
|
-
}
|
|
396
|
-
|
|
397
|
-
handleControlPlaneWebSocketClose(ws: {
|
|
398
|
-
data: ControlPlaneWebSocketData;
|
|
399
|
-
}): void {
|
|
400
|
-
if (!ws.data.clientId) return;
|
|
401
|
-
this.context.controlPlaneGateway.closeWebSocketClient(ws.data.clientId, 'socket-closed');
|
|
402
|
-
}
|
|
403
|
-
|
|
404
|
-
async invokeWebSocketControlPlaneCall(input: {
|
|
405
|
-
readonly authToken: string;
|
|
406
|
-
readonly method: string;
|
|
407
|
-
readonly path: string;
|
|
408
|
-
readonly query?: Record<string, unknown>;
|
|
409
|
-
readonly body?: unknown;
|
|
410
|
-
readonly context?: {
|
|
411
|
-
readonly principalKind?: 'user' | 'bot' | 'service' | 'token' | 'remote-peer';
|
|
412
|
-
readonly admin?: boolean;
|
|
413
|
-
readonly scopes?: readonly string[];
|
|
414
|
-
};
|
|
415
|
-
}): Promise<{ status: number; ok: boolean; body: unknown }> {
|
|
416
|
-
const matchedDescriptor = this.context.gatewayMethods.findByHttpBinding(input.method, input.path);
|
|
417
|
-
if (matchedDescriptor) {
|
|
418
|
-
const denied = this.validateGatewayInvocation(matchedDescriptor, input.context);
|
|
419
|
-
if (denied) return denied;
|
|
420
|
-
}
|
|
421
|
-
const url = new URL(`http://${this.context.host}:${this.context.port}${input.path.startsWith('/') ? input.path : `/${input.path}`}`);
|
|
422
|
-
for (const [key, value] of Object.entries(input.query ?? {})) {
|
|
423
|
-
if (value === undefined || value === null) continue;
|
|
424
|
-
url.searchParams.set(key, String(value));
|
|
425
|
-
}
|
|
426
|
-
const request = new Request(url.toString(), {
|
|
427
|
-
method: input.method,
|
|
428
|
-
headers: {
|
|
429
|
-
Authorization: `Bearer ${input.authToken}`,
|
|
430
|
-
...(input.body !== undefined ? { 'Content-Type': 'application/json' } : {}),
|
|
431
|
-
},
|
|
432
|
-
...(input.body !== undefined ? { body: JSON.stringify(input.body) } : {}),
|
|
433
|
-
});
|
|
434
|
-
const response = await this.context.dispatchApiRoutes(request) ?? Response.json({ error: 'Not found' }, { status: 404 });
|
|
435
|
-
const raw = await response.text();
|
|
436
|
-
let body: unknown = raw;
|
|
437
|
-
if (raw.length > 0) {
|
|
438
|
-
try {
|
|
439
|
-
body = JSON.parse(raw);
|
|
440
|
-
} catch {
|
|
441
|
-
body = raw;
|
|
442
|
-
}
|
|
443
|
-
} else {
|
|
444
|
-
body = null;
|
|
445
|
-
}
|
|
446
|
-
return {
|
|
447
|
-
status: response.status,
|
|
448
|
-
ok: response.ok,
|
|
449
|
-
body,
|
|
450
|
-
};
|
|
451
|
-
}
|
|
452
|
-
|
|
453
|
-
async invokeGatewayMethodCall(input: {
|
|
454
|
-
readonly authToken: string;
|
|
455
|
-
readonly methodId: string;
|
|
456
|
-
readonly query?: Record<string, unknown>;
|
|
457
|
-
readonly body?: unknown;
|
|
458
|
-
readonly context?: {
|
|
459
|
-
readonly principalId?: string;
|
|
460
|
-
readonly principalKind?: 'user' | 'bot' | 'service' | 'token' | 'remote-peer';
|
|
461
|
-
readonly admin?: boolean;
|
|
462
|
-
readonly scopes?: readonly string[];
|
|
463
|
-
readonly clientKind?: string;
|
|
464
|
-
};
|
|
465
|
-
}): Promise<{ status: number; ok: boolean; body: unknown }> {
|
|
466
|
-
const descriptor = this.context.gatewayMethods.get(input.methodId);
|
|
467
|
-
if (!descriptor) {
|
|
468
|
-
return { status: 404, ok: false, body: { error: `Unknown gateway method: ${input.methodId}` } };
|
|
469
|
-
}
|
|
470
|
-
const denied = this.validateGatewayInvocation(descriptor, input.context);
|
|
471
|
-
if (denied) return denied;
|
|
472
|
-
if (this.context.gatewayMethods.hasHandler(input.methodId)) {
|
|
473
|
-
try {
|
|
474
|
-
const body = await this.context.gatewayMethods.invoke(input.methodId, {
|
|
475
|
-
body: input.body,
|
|
476
|
-
query: input.query,
|
|
477
|
-
context: {
|
|
478
|
-
authToken: input.authToken,
|
|
479
|
-
principalId: input.context?.principalId,
|
|
480
|
-
principalKind: input.context?.principalKind,
|
|
481
|
-
admin: input.context?.admin,
|
|
482
|
-
scopes: input.context?.scopes,
|
|
483
|
-
clientKind: input.context?.clientKind,
|
|
484
|
-
},
|
|
485
|
-
});
|
|
486
|
-
return { status: 200, ok: true, body };
|
|
487
|
-
} catch (error) {
|
|
488
|
-
return {
|
|
489
|
-
status: 500,
|
|
490
|
-
ok: false,
|
|
491
|
-
body: { error: summarizeError(error) },
|
|
492
|
-
};
|
|
493
|
-
}
|
|
494
|
-
}
|
|
495
|
-
if (!descriptor.http) {
|
|
496
|
-
return { status: 501, ok: false, body: { error: `Gateway method is not invokable: ${input.methodId}` } };
|
|
497
|
-
}
|
|
498
|
-
const resolvedPath = resolveGatewayPathTemplate(descriptor.http.path, input.query, input.body);
|
|
499
|
-
if (!resolvedPath.path) {
|
|
500
|
-
return {
|
|
501
|
-
status: 400,
|
|
502
|
-
ok: false,
|
|
503
|
-
body: {
|
|
504
|
-
error: `Missing path parameter${resolvedPath.missing.length === 1 ? '' : 's'} for ${input.methodId}: ${resolvedPath.missing.join(', ')}`,
|
|
505
|
-
missing: [...resolvedPath.missing],
|
|
506
|
-
},
|
|
507
|
-
};
|
|
508
|
-
}
|
|
509
|
-
return this.invokeWebSocketControlPlaneCall({
|
|
510
|
-
authToken: input.authToken,
|
|
511
|
-
method: descriptor.http.method,
|
|
512
|
-
path: resolvedPath.path,
|
|
513
|
-
query: input.query,
|
|
514
|
-
body: descriptor.http.method === 'GET' || descriptor.http.method === 'DELETE' ? undefined : input.body,
|
|
515
|
-
context: {
|
|
516
|
-
principalKind: input.context?.principalKind,
|
|
517
|
-
admin: input.context?.admin,
|
|
518
|
-
scopes: input.context?.scopes,
|
|
519
|
-
},
|
|
520
|
-
});
|
|
521
|
-
}
|
|
522
|
-
}
|