@polpo-ai/node 0.11.1

package/dist/server/deps.d.ts

@@ -0,0 +1,157 @@
+/**
+ * Route dependency interfaces.
+ *
+ * Each route factory accepts a `() => XxxDeps` thunk that is evaluated
+ * at request time (after orchestrator init).  This decouples routes from
+ * the Orchestrator god-object so consumers can wire stores directly.
+ */
+import type { TaskStore } from "@polpo-ai/core/task-store";
+import type { RunStore } from "@polpo-ai/core/run-store";
+import type { LogStore } from "@polpo-ai/core/log-store";
+import type { VaultStore } from "@polpo-ai/core/vault-store";
+import type { PlaybookStore } from "@polpo-ai/core/playbook-store";
+import type { SessionStore } from "@polpo-ai/core/session-store";
+export interface VaultRouteDeps {
+    vaultStore?: VaultStore;
+}
+export interface ChatRouteDeps {
+    sessionStore?: SessionStore;
+}
+export interface TaskRouteDeps {
+    taskStore: TaskStore;
+    addTask: (...args: any[]) => Promise<any>;
+    deleteTask: (...args: any[]) => Promise<any>;
+    retryTask: (...args: any[]) => Promise<any>;
+    killTask: (...args: any[]) => Promise<any>;
+    reassessTask: (...args: any[]) => Promise<any>;
+    forceFailTask: (...args: any[]) => Promise<any>;
+    updateTaskDescription: (...args: any[]) => Promise<any>;
+    updateTaskAssignment: (...args: any[]) => Promise<any>;
+    updateTaskExpectations: (...args: any[]) => Promise<any>;
+}
+export interface AgentRouteDeps {
+    getAgents: () => Promise<any[]>;
+    addAgent: (...args: any[]) => Promise<any>;
+    removeAgent: (...args: any[]) => Promise<any>;
+    updateAgent: (...args: any[]) => Promise<any>;
+    getTeams: () => Promise<any[]>;
+    getTeam: (name?: string) => Promise<any>;
+    addTeam: (...args: any[]) => Promise<any>;
+    removeTeam: (...args: any[]) => Promise<any>;
+    renameTeam: (oldName: string, newName: string) => Promise<any>;
+    getStore: () => TaskStore;
+    getRunStore: () => RunStore;
+    getPolpoDir: () => string;
+}
+export interface MissionRouteDeps {
+    getAllMissions: () => Promise<any[]>;
+    getResumableMissions: () => Promise<any[]>;
+    getMission: (missionId: string) => Promise<any>;
+    saveMission: (...args: any[]) => Promise<any>;
+    updateMission: (missionId: string, updates: any) => Promise<any>;
+    deleteMission: (missionId: string) => Promise<any>;
+    executeMission: (missionId: string) => Promise<any>;
+    resumeMission: (missionId: string, opts?: any) => Promise<any>;
+    abortGroup: (groupName: string) => Promise<any>;
+    getActiveCheckpoints: () => any[];
+    resumeCheckpointByMissionId: (missionId: string, checkpointName: string) => Promise<any>;
+    getActiveDelays: () => any[];
+    addMissionTask: (missionId: string, task: any) => Promise<any>;
+    updateMissionTask: (missionId: string, taskTitle: string, updates: any) => Promise<any>;
+    removeMissionTask: (missionId: string, taskTitle: string) => Promise<any>;
+    reorderMissionTasks: (missionId: string, titles: string[]) => Promise<any>;
+    addMissionCheckpoint: (missionId: string, checkpoint: any) => Promise<any>;
+    updateMissionCheckpoint: (missionId: string, checkpointName: string, updates: any) => Promise<any>;
+    removeMissionCheckpoint: (missionId: string, checkpointName: string) => Promise<any>;
+    addMissionDelay: (missionId: string, delay: any) => Promise<any>;
+    updateMissionDelay: (missionId: string, delayName: string, updates: any) => Promise<any>;
+    removeMissionDelay: (missionId: string, delayName: string) => Promise<any>;
+    addMissionQualityGate: (missionId: string, gate: any) => Promise<any>;
+    updateMissionQualityGate: (missionId: string, gateName: string, updates: any) => Promise<any>;
+    removeMissionQualityGate: (missionId: string, gateName: string) => Promise<any>;
+    addMissionTeamMember: (missionId: string, member: any) => Promise<any>;
+    updateMissionTeamMember: (missionId: string, memberName: string, updates: any) => Promise<any>;
+    removeMissionTeamMember: (missionId: string, memberName: string) => Promise<any>;
+    updateMissionNotifications: (missionId: string, notifications: any) => Promise<any>;
+}
+export interface PlaybookRouteDeps {
+    playbookStore: PlaybookStore;
+    saveMission: (...args: any[]) => Promise<any>;
+    executeMission: (missionId: string) => Promise<any>;
+}
+export interface ApprovalRouteDeps {
+    getAllApprovals: (status?: string) => Promise<any[]>;
+    getApprovalRequest: (id: string) => Promise<any>;
+    approveRequest: (id: string, resolvedBy?: string, note?: string) => Promise<any>;
+    rejectRequest: (id: string, feedback: string, resolvedBy?: string) => Promise<any>;
+    canRejectRequest: (id: string) => Promise<{
+        allowed: boolean;
+        rejectionCount?: number;
+        maxRejections?: number;
+    }>;
+    getPendingApprovals: () => Promise<any[]>;
+}
+export interface NotificationRouterLike {
+    getStore: () => any;
+    sendDirect: (opts: any) => Promise<any>;
+    getRules: () => any[];
+    addRule: (rule: any) => void;
+    removeRule: (ruleId: string) => boolean;
+    getChannelIds: () => string[];
+    testChannels: () => Promise<Record<string, boolean>>;
+}
+export interface SchedulerLike {
+    getAllSchedules: () => any[];
+    getScheduleByMissionId: (missionId: string) => any;
+    registerMission: (mission: any) => any;
+    unregisterMission: (missionId: string) => boolean;
+}
+export interface ScheduleRouteDeps {
+    getScheduler: () => SchedulerLike | undefined;
+    getMission: (missionId: string) => Promise<any>;
+    updateMission: (missionId: string, updates: any) => Promise<any>;
+}
+export interface WatcherManagerLike {
+    getAll: () => any[];
+    getActive: () => any[];
+    create: (opts: any) => any;
+    remove: (watcherId: string) => boolean;
+}
+export interface WatcherRouteDeps {
+    getWatcherManager: () => WatcherManagerLike | undefined;
+    taskStore: TaskStore;
+}
+export interface StateRouteDeps {
+    taskStore: TaskStore;
+    getConfig: () => any;
+    hasMemory: () => Promise<boolean>;
+    getMemory: () => Promise<any>;
+    saveMemory: (content: any) => Promise<void>;
+    hasAgentMemory: (agentName: string) => Promise<boolean>;
+    getAgentMemory: (agentName: string) => Promise<any>;
+    saveAgentMemory: (agentName: string, content: any) => Promise<void>;
+    getLogStore: () => LogStore | undefined;
+}
+export interface SkillRouteDeps {
+    getPolpoDir: () => string;
+    getWorkDir: () => string;
+    getAgents: () => Promise<any[]>;
+}
+export interface ConfigRouteDeps {
+    getConfig: () => any;
+    reloadConfig: () => Promise<boolean>;
+    getPolpoDir: () => string;
+    getNotificationRouter: () => NotificationRouterLike | undefined;
+    loadPolpoConfig: (polpoDir: string) => any;
+    savePolpoConfig: (polpoDir: string, config: any) => void;
+}
+export interface AuthRouteDeps {
+    getConfig: () => any;
+}
+export interface FileRouteDeps {
+    getPolpoDir: () => string;
+    getWorkDir: () => string;
+    getAgentWorkDir: () => string;
+    emit: (event: string, data: any) => void;
+}
+//# sourceMappingURL=deps.d.ts.map

package/dist/server/deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../../src/server/deps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAIjE,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAID,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,SAAS,CAAC;IACrB,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/C,aAAa,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,qBAAqB,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACxD,oBAAoB,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACvD,sBAAsB,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CAC1D;AAID,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,UAAU,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,QAAQ,EAAE,MAAM,SAAS,CAAC;IAC1B,WAAW,EAAE,MAAM,QAAQ,CAAC;IAC5B,WAAW,EAAE,MAAM,MAAM,CAAC;CAC3B;AAID,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,oBAAoB,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,oBAAoB,EAAE,MAAM,GAAG,EAAE,CAAC;IAClC,2BAA2B,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACzF,eAAe,EAAE,MAAM,GAAG,EAAE,CAAC;IAC7B,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/D,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACxF,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,mBAAmB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACnG,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACrF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACzF,kBAAkB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,qBAAqB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9F,wBAAwB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAChF,oBAAoB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACvE,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/F,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACjF,0BAA0B,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACrF;AAID,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CACrD;AAID,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,kBAAkB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACjF,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACnF,gBAAgB,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjH,mBAAmB,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;CAC3C;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,GAAG,CAAC;IACpB,UAAU,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC;IACtB,OAAO,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;IAC7B,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IACxC,aAAa,EAAE,MAAM,MAAM,EAAE,CAAC;IAC9B,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACtD;AAID,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,GAAG,EAAE,CAAC;IAC7B,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,GAAG,CAAC;IACnD,eAAe,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,GAAG,CAAC;IACvC,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;CACnD;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,aAAa,GAAG,SAAS,CAAC;IAC9C,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CAClE;AAID,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,EAAE,CAAC;IACvB,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC;IAC3B,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,kBAAkB,GAAG,SAAS,CAAC;IACxD,SAAS,EAAE,SAAS,CAAC;CACtB;AAID,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,CAAC;IACrB,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,UAAU,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,cAAc,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,WAAW,EAAE,MAAM,QAAQ,GAAG,SAAS,CAAC;CACzC;AAID,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;CACjC;AAID,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,GAAG,CAAC;IACrB,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,sBAAsB,GAAG,SAAS,CAAC;IAChE,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,CAAC;IAC3C,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,IAAI,CAAC;CAC1D;AAID,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,GAAG,CAAC;CACtB;AAID,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,CAAC;CAC1C"}

package/dist/server/deps.js

@@ -0,0 +1,9 @@
+/**
+ * Route dependency interfaces.
+ *
+ * Each route factory accepts a `() => XxxDeps` thunk that is evaluated
+ * at request time (after orchestrator init).  This decouples routes from
+ * the Orchestrator god-object so consumers can wire stores directly.
+ */
+export {};
+//# sourceMappingURL=deps.js.map

package/dist/server/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/server/deps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/server/index.d.ts

@@ -0,0 +1,43 @@
+import { Orchestrator } from "../core/orchestrator.js";
+import type { ServerConfig } from "./types.js";
+/**
+ * Polpo HTTP Server.
+ *
+ * Single-orchestrator architecture. Manages one Polpo instance via HTTP API + SSE streaming.
+ *
+ * Usage:
+ *   const server = new PolpoServer({
+ *     port: 3890,
+ *     host: "0.0.0.0",
+ *     workDir: "./my-project",
+ *     autoStart: true,
+ *   });
+ *   await server.start();
+ */
+export declare class PolpoServer {
+    private config;
+    private orchestrator;
+    private sseBridge;
+    private server;
+    private shutdownHandlers;
+    constructor(config: ServerConfig);
+    /** Initialize the orchestrator (called at start or after setup completes). */
+    private initOrchestrator;
+    /** Called by the initialize endpoint to transition from uninitialized → ready. */
+    completeSetup(workDir: string): Promise<void>;
+    /** Start the server: init orchestrator if config exists, bind HTTP. */
+    start(): Promise<void>;
+    /** Graceful shutdown: stop orchestrator, close HTTP server. */
+    stop(): Promise<void>;
+    /** Get the orchestrator (for programmatic access). */
+    getOrchestrator(): Orchestrator;
+}
+export { createApp } from "./app.js";
+export type { AppOptions } from "./app.js";
+export { SSEBridge } from "./sse-bridge.js";
+export type { ServerConfig, ApiResponse, ApiError, SSEEvent, CreateTaskRequest, UpdateTaskRequest, CreateMissionRequest, UpdateMissionRequest, AddAgentRequest, } from "./types.js";
+export { taskRoutes, missionRoutes, chatRoutes, approvalRoutes, playbookRoutes, stateRoutes, completionRoutes, scheduleRoutes, watcherRoutes, vaultRoutes, healthRoutes, agentRoutes, eventRoutes, configRoutes, } from "@polpo-ai/server";
+export { skillRoutes } from "./routes/skills.js";
+export { fileRoutes } from "./routes/files.js";
+export { publicConfigRoutes } from "./routes/config.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW;IAMV,OAAO,CAAC,MAAM;IAL1B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,SAAS,CAAa;IAC9B,OAAO,CAAC,MAAM,CAAyC;IACvD,OAAO,CAAC,gBAAgB,CAAsB;gBAE1B,MAAM,EAAE,YAAY;IAExC,8EAA8E;YAChE,gBAAgB;IAiB9B,kFAAkF;IAC5E,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,uEAAuE;IACjE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2D5B,+DAA+D;IACzD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B,sDAAsD;IACtD,eAAe,IAAI,YAAY;CAGhC;AAGD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,GAChB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EACrD,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAC7D,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,GACjF,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,128 @@
+import { existsSync } from "node:fs";
+import { resolve, basename, join } from "node:path";
+import { getPolpoDir } from "../core/constants.js";
+import { serve } from "@hono/node-server";
+import { createApp } from "./app.js";
+import { Orchestrator } from "../core/orchestrator.js";
+import { SSEBridge } from "./sse-bridge.js";
+/**
+ * Polpo HTTP Server.
+ *
+ * Single-orchestrator architecture. Manages one Polpo instance via HTTP API + SSE streaming.
+ *
+ * Usage:
+ *   const server = new PolpoServer({
+ *     port: 3890,
+ *     host: "0.0.0.0",
+ *     workDir: "./my-project",
+ *     autoStart: true,
+ *   });
+ *   await server.start();
+ */
+export class PolpoServer {
+    config;
+    orchestrator;
+    sseBridge;
+    server = null;
+    shutdownHandlers = [];
+    constructor(config) {
+        this.config = config;
+    }
+    /** Initialize the orchestrator (called at start or after setup completes). */
+    async initOrchestrator(overrideWorkDir) {
+        const workDir = resolve(overrideWorkDir ?? this.config.workDir);
+        const defaultTeam = {
+            name: "default",
+            agents: [{ name: "dev-1", role: "developer" }],
+        };
+        await this.orchestrator.initInteractive(basename(workDir), defaultTeam);
+        // (Re-)create SSE bridge
+        this.sseBridge?.dispose();
+        this.sseBridge = new SSEBridge(this.orchestrator);
+        this.sseBridge.start();
+        console.log("\n  Orchestrator initialized — dashboard is ready.\n");
+    }
+    /** Called by the initialize endpoint to transition from uninitialized → ready. */
+    async completeSetup(workDir) {
+        this.orchestrator.resetWorkDir(workDir);
+        await this.initOrchestrator(workDir);
+    }
+    /** Start the server: init orchestrator if config exists, bind HTTP. */
+    async start() {
+        const workDir = resolve(this.config.workDir);
+        this.orchestrator = new Orchestrator(workDir);
+        const configPath = join(getPolpoDir(workDir), "polpo.json");
+        const hasConfig = existsSync(configPath);
+        if (hasConfig) {
+            await this.initOrchestrator();
+            if (this.config.autoStart !== false) {
+                this.orchestrator.run().catch((err) => {
+                    console.error(`[PolpoServer] Supervisor loop crashed:`, err instanceof Error ? err.message : err);
+                });
+            }
+        }
+        else {
+            // No config yet — placeholder SSE bridge, orchestrator will be initialized after setup
+            this.sseBridge = new SSEBridge(this.orchestrator);
+        }
+        const app = createApp(this.orchestrator, this.sseBridge, {
+            apiKeys: this.config.apiKeys,
+            corsOrigins: this.config.corsOrigins,
+            workDir,
+            onInitialize: (workDir) => this.completeSetup(workDir),
+        });
+        this.server = serve({
+            fetch: app.fetch,
+            port: this.config.port,
+            hostname: this.config.host,
+        });
+        // Disable Node 18+ requestTimeout (default 5 min). This is a wall-clock
+        // timer — NOT idle-based — so it kills long-running streaming responses
+        // (e.g. multi-turn tool loops in chat completions) even when data is
+        // actively flowing. Setting to 0 disables it entirely.
+        // See: https://nodejs.org/api/http.html#serverrequesttimeout
+        if ("requestTimeout" in this.server) {
+            this.server.requestTimeout = 0;
+        }
+        const base = `http://${this.config.host}:${this.config.port}`;
+        console.log(`\n  Listening  ${base}`);
+        console.log(`  WorkDir    ${workDir}`);
+        console.log(`  API        ${base}/api/v1/health`);
+        console.log();
+        // Signal handlers for graceful shutdown
+        const onSignal = () => { this.stop(); };
+        process.on("SIGTERM", onSignal);
+        process.on("SIGINT", onSignal);
+        this.shutdownHandlers.push(() => {
+            process.off("SIGTERM", onSignal);
+            process.off("SIGINT", onSignal);
+        });
+    }
+    /** Graceful shutdown: stop orchestrator, close HTTP server. */
+    async stop() {
+        console.log("\nShutting down Polpo Server...");
+        this.sseBridge?.dispose();
+        if (this.orchestrator?.isInitialized) {
+            await this.orchestrator.gracefulStop();
+        }
+        this.server?.close();
+        for (const fn of this.shutdownHandlers)
+            fn();
+        console.log("Polpo Server stopped.");
+    }
+    /** Get the orchestrator (for programmatic access). */
+    getOrchestrator() {
+        return this.orchestrator;
+    }
+}
+// Re-exports
+export { createApp } from "./app.js";
+export { SSEBridge } from "./sse-bridge.js";
+// Route factories — shared routes re-exported from @polpo-ai/server
+export { taskRoutes, missionRoutes, chatRoutes, approvalRoutes, playbookRoutes, stateRoutes, completionRoutes, scheduleRoutes, watcherRoutes, vaultRoutes, healthRoutes, agentRoutes, eventRoutes, configRoutes, } from "@polpo-ai/server";
+// eventRoutes now in @polpo-ai/server (decoupled with EventBridge interface)
+export { skillRoutes } from "./routes/skills.js";
+export { fileRoutes } from "./routes/files.js";
+// configRoutes now in @polpo-ai/server (decoupled with saveConfig dep)
+export { publicConfigRoutes } from "./routes/config.js";
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAI5C;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,WAAW;IAMF;IALZ,YAAY,CAAgB;IAC5B,SAAS,CAAa;IACtB,MAAM,GAAoC,IAAI,CAAC;IAC/C,gBAAgB,GAAmB,EAAE,CAAC;IAE9C,YAAoB,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAE5C,8EAA8E;IACtE,KAAK,CAAC,gBAAgB,CAAC,eAAwB;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,WAAW,GAAS;YACxB,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;SAC/C,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QAExE,yBAAyB;QACzB,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QAEvB,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,aAAa,CAAC,OAAe;QACjC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC;QAC5D,MAAM,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QAEzC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACpC,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACpG,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,uFAAuF;YACvF,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,EAAE;YACvD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,OAAO;YACP,YAAY,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;SAC/D,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;SAC3B,CAAC,CAAC;QAEH,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,uDAAuD;QACvD,6DAA6D;QAC7D,IAAI,gBAAgB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,MAAqC,CAAC,cAAc,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAE9D,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,wCAAwC;QACxC,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE;YAC9B,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,IAAI;QACR,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,gBAAgB;YAAE,EAAE,EAAE,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,sDAAsD;IACtD,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,aAAa;AACb,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAa5C,oEAAoE;AACpE,OAAO,EACL,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EACrD,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAC7D,aAAa,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,GACjF,MAAM,kBAAkB,CAAC;AAC1B,6EAA6E;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,uEAAuE;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/server/middleware/auth.d.ts

@@ -0,0 +1,3 @@
+import type { MiddlewareHandler } from "hono";
+export declare function authMiddleware(apiKeys: string[]): MiddlewareHandler;
+//# sourceMappingURL=auth.d.ts.map

package/dist/server/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAoB9C,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAoBnE"}

package/dist/server/middleware/auth.js

@@ -0,0 +1,35 @@
+import { timingSafeEqual } from "node:crypto";
+/**
+ * Constant-time string comparison to prevent timing attacks.
+ */
+function safeCompare(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(Buffer.from(a), Buffer.from(b));
+}
+/**
+ * API key authentication middleware.
+ * Checks X-API-Key header against configured keys.
+ * If no keys configured, skips auth (local dev mode) with a one-time warning.
+ *
+ * NOTE: API key via query string (?apiKey=) has been removed to prevent
+ * credential leakage in server logs, browser history, and referrer headers.
+ */
+let warnedNoKeys = false;
+export function authMiddleware(apiKeys) {
+    return async (c, next) => {
+        if (apiKeys.length === 0) {
+            if (!warnedNoKeys) {
+                warnedNoKeys = true;
+                console.warn("[polpo] WARNING: No API keys configured — all requests are unauthenticated. Set apiKeys in polpo.json or POLPO_API_KEY env var.");
+            }
+            return next();
+        }
+        const key = c.req.header("x-api-key");
+        if (!key || !apiKeys.some(k => safeCompare(k, key))) {
+            return c.json({ ok: false, error: "API key required", code: "AUTH_REQUIRED" }, 401);
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=auth.js.map

package/dist/server/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C;;GAEG;AACH,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,YAAY,GAAG,KAAK,CAAC;AAEzB,MAAM,UAAU,cAAc,CAAC,OAAiB;IAC9C,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,iIAAiI,CAAC,CAAC;YAClJ,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,eAAe,EAAE,EAC/D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/middleware/error.d.ts

@@ -0,0 +1,15 @@
+import type { MiddlewareHandler } from "hono";
+/**
+ * Known error class for API errors with specific HTTP status codes.
+ */
+export declare class ApiHttpError extends Error {
+    code: string;
+    status: number;
+    constructor(message: string, code: string, status?: number);
+}
+/**
+ * Global error handling middleware.
+ * Catches thrown errors and maps to ApiError responses.
+ */
+export declare function errorMiddleware(): MiddlewareHandler;
+//# sourceMappingURL=error.d.ts.map

package/dist/server/middleware/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE9C;;GAEG;AACH,qBAAa,YAAa,SAAQ,KAAK;IAG5B,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,MAAM;gBAFrB,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,MAAM,GAAE,MAAY;CAK9B;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,iBAAiB,CA4CnD"}

package/dist/server/middleware/error.js

@@ -0,0 +1,44 @@
+/**
+ * Known error class for API errors with specific HTTP status codes.
+ */
+export class ApiHttpError extends Error {
+    code;
+    status;
+    constructor(message, code, status = 400) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = "ApiHttpError";
+    }
+}
+/**
+ * Global error handling middleware.
+ * Catches thrown errors and maps to ApiError responses.
+ */
+export function errorMiddleware() {
+    return async (c, next) => {
+        try {
+            await next();
+        }
+        catch (err) {
+            if (err instanceof ApiHttpError) {
+                return c.json({ ok: false, error: err.message, code: err.code }, err.status);
+            }
+            const message = err instanceof Error ? err.message : String(err);
+            // Map known error patterns to status codes
+            if (message.includes("not found") || message.includes("Not found")) {
+                return c.json({ ok: false, error: message, code: "NOT_FOUND" }, 404);
+            }
+            if (message.includes("Cannot") && (message.includes("state") || message.includes("status"))) {
+                return c.json({ ok: false, error: message, code: "INVALID_STATE" }, 409);
+            }
+            if (message.includes("already exists") || message.includes("already active")) {
+                return c.json({ ok: false, error: message, code: "CONFLICT" }, 409);
+            }
+            // Never leak internal error details to clients
+            console.error("[polpo] Internal server error:", message);
+            return c.json({ ok: false, error: "Internal server error", code: "INTERNAL_ERROR" }, 500);
+        }
+    };
+}
+//# sourceMappingURL=error.js.map

package/dist/server/middleware/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../src/server/middleware/error.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAG5B;IACA;IAHT,YACE,OAAe,EACR,IAAY,EACZ,SAAiB,GAAG;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAc;QAG3B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;gBAChC,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EACjD,GAAG,CAAC,MAAa,CAClB,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEjE,2CAA2C;YAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAChD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBAC5F,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC7E,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAC/C,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,+CAA+C;YAC/C,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EACrE,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/middleware/rate-limit.d.ts

@@ -0,0 +1,16 @@
+/**
+ * In-memory sliding-window rate limiter middleware.
+ *
+ * Tracks requests per IP using x-forwarded-for header (or "unknown").
+ * Returns 429 Too Many Requests with Retry-After header when limit exceeded.
+ * Expired entries are cleaned up periodically.
+ */
+import type { MiddlewareHandler } from "hono";
+/**
+ * Rate limiting middleware.
+ *
+ * @param maxReqs - Maximum requests per window (default: 200)
+ * @param windowMs - Window duration in ms (default: 60000)
+ */
+export declare function rateLimitMiddleware(maxReqs?: number, windowMs?: number): MiddlewareHandler;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/server/middleware/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAW9C;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAAyB,EAClC,QAAQ,GAAE,MAA0B,GACnC,iBAAiB,CAwCnB"}

package/dist/server/middleware/rate-limit.js

@@ -0,0 +1,51 @@
+/**
+ * In-memory sliding-window rate limiter middleware.
+ *
+ * Tracks requests per IP using x-forwarded-for header (or "unknown").
+ * Returns 429 Too Many Requests with Retry-After header when limit exceeded.
+ * Expired entries are cleaned up periodically.
+ */
+const DEFAULT_MAX_REQS = 200;
+const DEFAULT_WINDOW_MS = 60_000; // 1 minute
+const CLEANUP_INTERVAL_MS = 60_000; // 1 minute
+/**
+ * Rate limiting middleware.
+ *
+ * @param maxReqs - Maximum requests per window (default: 200)
+ * @param windowMs - Window duration in ms (default: 60000)
+ */
+export function rateLimitMiddleware(maxReqs = DEFAULT_MAX_REQS, windowMs = DEFAULT_WINDOW_MS) {
+    const windows = new Map();
+    // Periodic cleanup of expired entries
+    const cleanup = setInterval(() => {
+        const now = Date.now();
+        for (const [ip, entry] of windows) {
+            if (now - entry.windowStart > windowMs) {
+                windows.delete(ip);
+            }
+        }
+    }, CLEANUP_INTERVAL_MS);
+    // Don't keep the process alive just for cleanup
+    if (cleanup.unref)
+        cleanup.unref();
+    return async (c, next) => {
+        const ip = c.req.header("x-forwarded-for")?.split(",")[0]?.trim() || "unknown";
+        const now = Date.now();
+        let entry = windows.get(ip);
+        if (!entry || now - entry.windowStart > windowMs) {
+            // New window
+            entry = { count: 1, windowStart: now };
+            windows.set(ip, entry);
+        }
+        else {
+            entry.count++;
+        }
+        if (entry.count > maxReqs) {
+            const retryAfter = Math.ceil((entry.windowStart + windowMs - now) / 1000);
+            c.header("Retry-After", String(retryAfter));
+            return c.json({ ok: false, error: "Too many requests", code: "RATE_LIMITED" }, 429);
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/server/middleware/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/server/middleware/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,WAAW;AAC7C,MAAM,mBAAmB,GAAG,MAAM,CAAC,CAAC,WAAW;AAE/C;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,gBAAgB,EAClC,WAAmB,iBAAiB;IAEpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,sCAAsC;IACtC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YAClC,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,QAAQ,EAAE,CAAC;gBACvC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAExB,gDAAgD;IAChD,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAEnC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,IAAI,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,QAAQ,EAAE,CAAC;YACjD,aAAa;YACb,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YAC1E,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,EAC/D,GAAU,CACX,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/routes/config.d.ts

@@ -0,0 +1,25 @@
+import { OpenAPIHono } from "@hono/zod-openapi";
+import type { Orchestrator } from "../../core/orchestrator.js";
+/**
+ * Config management routes (requires orchestrator).
+ * GET    /config              — return current config (redacted)
+ * POST   /config/reload       — trigger a runtime config reload
+ * PATCH  /config/settings     — partially update settings (persists + reloads)
+ * GET    /config/channels     — list notification channels
+ * PUT    /config/channels/:n  — create or update a channel
+ * DELETE /config/channels/:n  — delete a channel
+ * POST   /config/channels/:n/test — test a channel
+ */
+export declare function configRoutes(getDeps: () => {
+    getConfig: () => any;
+    reloadConfig: () => Promise<boolean>;
+    getPolpoDir: () => string;
+    getNotificationRouter: () => any;
+}): OpenAPIHono;
+/**
+ * Public config routes — no auth required.
+ * GET  /config/status     — check if Polpo is configured/initialized
+ * POST /config/initialize — save config and init the orchestrator
+ */
+export declare function publicConfigRoutes(orchestrator: Orchestrator, workDir: string, onInitialize?: (workDir: string) => Promise<void>): OpenAPIHono;
+//# sourceMappingURL=config.d.ts.map

package/dist/server/routes/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/server/routes/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAkB,MAAM,mBAAmB,CAAC;AAKhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAiQ/D;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM;IAC1C,SAAS,EAAE,MAAM,GAAG,CAAC;IACrB,YAAY,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,WAAW,EAAE,MAAM,MAAM,CAAC;IAC1B,qBAAqB,EAAE,MAAM,GAAG,CAAC;CAClC,GAAG,WAAW,CA6Gd;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,GAChD,WAAW,CA2Fb"}