@privos_ai/app-server 0.6.2 → 0.7.1

package/dist/serve-app.d.ts

@@ -0,0 +1,81 @@
+import type { Server } from 'node:http';
+import { type Express } from 'express';
+import type { AppDescriptor } from './app-descriptor.js';
+import { type ReadinessCheckResult } from './direct/http-ingress.js';
+import { type RoomBoundHubClient } from './relay/hub-rest-as-bot-client.js';
+import { connectRelay, type RelayHandle } from './relay/relay-client.js';
+import { createStandaloneRelayIdentityController } from './relay/standalone-control.js';
+import { loadStandaloneIdentity } from './relay/standalone-identity.js';
+import { resolveRuntimeMode, type RuntimeMode } from './runtime-mode.js';
+import type { AppMcpHandler, UiResourceProvider } from './runtime.js';
+import { getWorkloadIdentityClient, type WorkloadIdentityClient } from './workload/workload-identity.js';
+/** Fallback listen port when no explicit `port`, `HTTP_PORT`, or `PORT` is set. */
+export declare const DEFAULT_SERVE_APP_PORT = 8080;
+/** Dev-only transport selector — the API form of the demo's `PRIVOS_TRANSPORT`. */
+export type ServeAppTransportOverride = 'http' | 'relay';
+/**
+ * Everything an app's handler factory needs, resolved for the active mode. The
+ * app builds its `McpHandler` from this and never touches transport internals.
+ */
+export interface ServeAppHandlerContext {
+    mode: RuntimeMode;
+    /**
+     * Hub REST transport authenticating as this app's own installation bot,
+     * wired to the correct Hub-origin source for the mode. Same
+     * `RoomBoundHubClient` shape in every mode.
+     */
+    agentBotHub: RoomBoundHubClient;
+    /**
+     * The managed workload identity SINGLETON — present only in `managed` mode.
+     * Managed-ingress room authority is WeakMap-keyed by this exact instance, so
+     * the handler MUST use this one (never construct a fresh `WorkloadIdentityClient`).
+     */
+    workloadIdentityClient?: WorkloadIdentityClient;
+    /** Resolve the Hub's own origin (managed: broker; standalone: paired file; dev: `PRIVOS_URL`). */
+    resolveHubOrigin(): Promise<string | undefined>;
+}
+export interface ServeAppOptions {
+    descriptor: AppDescriptor | (() => AppDescriptor | Promise<AppDescriptor>);
+    ui?: UiResourceProvider;
+    /** Build the app's MCP handler from the resolved runtime context. */
+    createHandler: (context: ServeAppHandlerContext) => AppMcpHandler | Promise<AppMcpHandler>;
+    /** Explicit listen port. Precedence: explicit > `HTTP_PORT` > `PORT` > {@link DEFAULT_SERVE_APP_PORT}. */
+    port?: number;
+    /** Explicit bind host. Default `0.0.0.0`, except `development` which defaults to loopback `127.0.0.1`. */
+    host?: string;
+    /** DEVELOPMENT-ONLY. Any value under managed or standalone-production is a boot error. */
+    transportOverride?: ServeAppTransportOverride;
+    /** Standalone `/ready` manifest input. Default: parse `${cwd}/privos-app.json` fresh each check. */
+    resolveManifest?: () => unknown | Promise<unknown>;
+    /**
+     * Express escape hatch — mount app-owned routes (/public, /ui, diagnostics)
+     * BEFORE the MCP router, so the router's CORS middleware (ACAO:* + OPTIONS
+     * short-circuit) never stamps or swallows them.
+     */
+    configure?: (app: Express) => void | Promise<void>;
+    /** Own SIGTERM/SIGINT (stop relay + close server). Default true. */
+    installSignalHandlers?: boolean;
+    logger?: (event: string, fields: Record<string, unknown>) => void;
+    /** Test-only seams; never set in production. */
+    __test?: ServeAppTestSeams;
+}
+/** Internal seams so unit tests can inject mode, workload posture, and relay without real sockets. */
+export interface ServeAppTestSeams {
+    env?: NodeJS.ProcessEnv;
+    resolveRuntimeMode?: typeof resolveRuntimeMode;
+    getWorkloadIdentityClient?: typeof getWorkloadIdentityClient;
+    loadStandaloneIdentity?: typeof loadStandaloneIdentity;
+    createStandaloneRelayIdentityController?: typeof createStandaloneRelayIdentityController;
+    connectRelay?: typeof connectRelay;
+}
+export interface ServeAppHandle {
+    mode: RuntimeMode;
+    server: Server;
+    /** Present only in standalone-production (MCP rides Relay). */
+    relayHandle?: RelayHandle;
+    /** The active `/ready` check for the resolved mode. */
+    readiness(): Promise<ReadinessCheckResult>;
+    close(): Promise<void>;
+}
+export declare function serveApp(options: ServeAppOptions): Promise<ServeAppHandle>;
+//# sourceMappingURL=serve-app.d.ts.map

package/dist/serve-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-app.d.ts","sourceRoot":"","sources":["../src/serve-app.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,OAAgB,EAAE,KAAK,OAAO,EAAE,MAAM,SAAS,CAAC;AAEhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAA4B,KAAK,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAE/F,OAAO,EAIN,KAAK,kBAAkB,EACvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACN,uCAAuC,EAEvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,sBAAsB,EAEtB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,kBAAkB,EAAoB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC3F,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,EACN,yBAAyB,EACzB,KAAK,sBAAsB,EAC3B,MAAM,iCAAiC,CAAC;AAEzC,mFAAmF;AACnF,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C,mFAAmF;AACnF,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzD;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,WAAW,CAAC;IAClB;;;;OAIG;IACH,WAAW,EAAE,kBAAkB,CAAC;IAChC;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD,kGAAkG;IAClG,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,aAAa,GAAG,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAC3E,EAAE,CAAC,EAAE,kBAAkB,CAAC;IACxB,qEAAqE;IACrE,aAAa,EAAE,CAAC,OAAO,EAAE,sBAAsB,KAAK,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3F,0GAA0G;IAC1G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,oGAAoG;IACpG,eAAe,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAClE,gDAAgD;IAChD,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED,sGAAsG;AACtG,MAAM,WAAW,iBAAiB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,kBAAkB,CAAC;IAC/C,yBAAyB,CAAC,EAAE,OAAO,yBAAyB,CAAC;IAC7D,sBAAsB,CAAC,EAAE,OAAO,sBAAsB,CAAC;IACvD,uCAAuC,CAAC,EAAE,OAAO,uCAAuC,CAAC;IACzF,YAAY,CAAC,EAAE,OAAO,YAAY,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,uDAAuD;IACvD,SAAS,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AAoBD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAyLhF"}

package/dist/serve-app.js

@@ -0,0 +1,277 @@
+/**
+ * `serveApp` — the single entrypoint that hides transport + trust bootstrap
+ * across all three runtime modes. A developer writes ONE app, declares its
+ * descriptor/ui/handler, and calls `serveApp(...)`; the SDK resolves the mode
+ * (`resolveRuntimeMode`) and wires the right transport, the workload/agent-bot
+ * hub client, and the readiness/health surface internally. App code never
+ * imports `connectRelay`, `loadStandaloneIdentity`, the identity controller,
+ * readiness checks, or the workload broker directly.
+ *
+ * What stays VISIBLE by design (hide plumbing, not trust): serveApp NEVER
+ * creates or rotates an identity file and NEVER invokes pairing on a missing
+ * one — it surfaces `StandaloneIdentityError` / `RuntimeModeError` verbatim.
+ * The pairing fingerprint/TOFU ceremony lives in `pairOverWebSocket` and the
+ * app's own pair scripts, and stays there.
+ *
+ * Mode matrix:
+ *  - managed: the `getWorkloadIdentityClient()` SINGLETON + agent-bot hub from
+ *    the workload broker + a Direct HTTP `createDirectRouter` with
+ *    `workloadSecurity: 'required'` HARD-CODED (never 'auto': 'auto' accepts
+ *    unsigned traffic whenever the socket is absent, including a managed
+ *    container whose socket vanishes mid-life).
+ *  - development: no workload client; the Direct HTTP router accepts unsigned
+ *    traffic, so it binds loopback (127.0.0.1) by default — exposing it on
+ *    0.0.0.0 requires an explicit `host`. `transportOverride: 'relay'` steps
+ *    aside for an app-owned dev relay loop (the interactive pairing prompt is
+ *    app-local by design), serving only health/ready/ui/configure over HTTP.
+ *  - standalone-production: `loadStandaloneIdentity` (fatal if missing/invalid)
+ *    + the standalone identity controller + agent-bot hub from the paired Hub
+ *    origin + `connectRelay` (MCP rides the Relay WebSocket, not HTTP) + the
+ *    SDK readiness check. Any persisted agent-bot credential is adopted at boot.
+ *
+ * `/health` and `/ready` exist in ALL modes (marketplace Docker HEALTHCHECK and
+ * the cluster monitor probe them). Ambiguous identity or production-without-
+ * identity fails closed via `RuntimeModeError`, unchanged.
+ */
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import express from 'express';
+import { createDirectRouter } from './direct/express-router.js';
+import { resolveHttpIngressListen } from './direct/http-ingress.js';
+import { setAdoptedAgentBotCredential } from './relay/agent-bot-credential.js';
+import { createAgentBotHubClient, createAgentBotHubClientFromHubOrigin, createAgentBotHubClientFromWorkloadIdentity, } from './relay/hub-rest-as-bot-client.js';
+import { connectRelay } from './relay/relay-client.js';
+import { createStandaloneRelayIdentityController, } from './relay/standalone-control.js';
+import { loadStandaloneIdentity, } from './relay/standalone-identity.js';
+import { createStandaloneReadinessCheck } from './relay/standalone-readiness.js';
+import { resolveRuntimeMode, RuntimeModeError } from './runtime-mode.js';
+import { getWorkloadIdentityClient, } from './workload/workload-identity.js';
+/** Fallback listen port when no explicit `port`, `HTTP_PORT`, or `PORT` is set. */
+export const DEFAULT_SERVE_APP_PORT = 8080;
+function defaultLogger(event, fields) {
+    if (event.includes('error') || event.includes('fail') || event.includes('rejected')) {
+        console.error(`[serveApp] ✗ ${event}`, fields);
+    }
+    else {
+        console.log(`[serveApp] · ${event}`);
+    }
+}
+/** Dev-only Hub origin: the legacy relay `PRIVOS_URL`, the only Hub address available outside a paired/managed runtime. */
+function developmentHubOrigin(env) {
+    const url = env.PRIVOS_URL;
+    return url && /^https?:\/\//.test(url) ? url.replace(/\/+$/, '') : undefined;
+}
+function defaultManifestResolver() {
+    return JSON.parse(readFileSync(path.resolve(process.cwd(), 'privos-app.json'), 'utf8'));
+}
+export async function serveApp(options) {
+    const env = options.__test?.env ?? process.env;
+    const logger = options.logger ?? defaultLogger;
+    const resolveMode = options.__test?.resolveRuntimeMode ?? resolveRuntimeMode;
+    // Fail closed on ambiguous / production-without-identity, exactly as before.
+    const resolution = resolveMode({ env });
+    const mode = resolution.mode;
+    logger('serveApp.mode_resolved', { mode, reason: resolution.reason });
+    if (options.transportOverride !== undefined && mode !== 'development') {
+        // H1: transportOverride is the API form of PRIVOS_TRANSPORT and is a
+        // development affordance only. Accepting it under a production mode would
+        // let it override the mode's fixed, trusted transport — a boot error.
+        throw new RuntimeModeError('TRANSPORT_OVERRIDE_NOT_ALLOWED', `transportOverride is development-only; runtime mode is '${mode}'. Remove transportOverride, ` +
+            'or run without the managed workload socket / standalone identity file for local development.');
+    }
+    // Per-mode wiring, all resolved BEFORE the handler is built so the handler
+    // context is complete when createHandler runs.
+    let workloadIdentityClient;
+    let agentBotHub;
+    let resolveHubOrigin;
+    let loaded;
+    let identityController;
+    let mountDirectRouter = false;
+    if (mode === 'managed') {
+        const getClient = options.__test?.getWorkloadIdentityClient ?? getWorkloadIdentityClient;
+        workloadIdentityClient = getClient();
+        resolveHubOrigin = async () => {
+            try {
+                return (await workloadIdentityClient.brokerContext()).hubOrigin;
+            }
+            catch {
+                return undefined;
+            }
+        };
+        agentBotHub = createAgentBotHubClientFromWorkloadIdentity(workloadIdentityClient);
+        mountDirectRouter = true;
+    }
+    else if (mode === 'standalone-production') {
+        const load = options.__test?.loadStandaloneIdentity ?? loadStandaloneIdentity;
+        loaded = load();
+        // Boot-seed a persisted agent-bot credential so a delivered credential
+        // survives restart and is usable before any live control-channel push.
+        if (loaded.identity.agentBotCredential)
+            setAdoptedAgentBotCredential(loaded.identity.agentBotCredential);
+        const makeController = options.__test?.createStandaloneRelayIdentityController ?? createStandaloneRelayIdentityController;
+        identityController = makeController(loaded, {
+            logger: (event, fields) => logger(event, fields),
+        });
+        resolveHubOrigin = async () => loaded.relay.privosUrl;
+        agentBotHub = createAgentBotHubClientFromHubOrigin(loaded.relay.privosUrl);
+        mountDirectRouter = false; // MCP rides Relay, not HTTP.
+    }
+    else {
+        resolveHubOrigin = async () => developmentHubOrigin(env);
+        agentBotHub = createAgentBotHubClient({ resolveHubOrigin });
+        // Default dev transport is Direct HTTP; 'relay' steps aside for an
+        // app-owned dev relay loop and serves only the HTTP support surface.
+        mountDirectRouter = options.transportOverride !== 'relay';
+    }
+    const handler = await options.createHandler({
+        mode,
+        agentBotHub,
+        workloadIdentityClient,
+        resolveHubOrigin,
+    });
+    // A ref-cell for the relay handle so the readiness closure can observe a
+    // connection that is opened AFTER the HTTP server begins listening (M5).
+    const relayRef = {};
+    const readiness = buildReadiness({
+        mode,
+        workloadIdentityClient,
+        relayRef,
+        resolveManifest: options.resolveManifest ?? defaultManifestResolver,
+    });
+    // Mount order: health/ready → configure → router. The router's CORS
+    // middleware stamps ACAO:* and short-circuits OPTIONS on everything mounted
+    // after it, so app-owned configure routes MUST come first.
+    const app = express();
+    app.get('/health', (_req, res) => {
+        res.status(200).json({ ok: true, status: 'alive', mode });
+    });
+    app.get('/ready', async (_req, res, next) => {
+        try {
+            const result = await readiness();
+            const status = result.ok ? 200 : (result.status ?? 503);
+            res.status(status).json({ ok: result.ok, status: result.ok ? 'ready' : 'not_ready', ...(result.body ?? {}) });
+        }
+        catch (error) {
+            next(error);
+        }
+    });
+    if (options.configure)
+        await options.configure(app);
+    if (mountDirectRouter) {
+        app.use(createDirectRouter({
+            descriptor: options.descriptor,
+            handler,
+            ui: options.ui,
+            // H2: managed hard-codes 'required' (never accept unsigned traffic).
+            // Development leaves the default 'auto', which with no workload
+            // socket accepts unsigned — safe only because dev binds loopback.
+            ...(mode === 'managed' ? { workloadSecurity: 'required', workloadIdentityClient } : {}),
+        }));
+    }
+    const listen = resolveHttpIngressListen({ env, defaultPort: DEFAULT_SERVE_APP_PORT });
+    // serveApp ALWAYS serves the HTTP support surface (/health + /ready in every
+    // mode), so HTTP_INGRESS=off is not honored here: never fall through to
+    // resolveHttpIngressListen's disabled port 0 (which would bind a random port).
+    const port = options.port ?? (listen.enabled ? listen.port : DEFAULT_SERVE_APP_PORT);
+    // H2: unsigned dev traffic must not leak off-host; loopback unless opted out.
+    const host = options.host ?? (mode === 'development' ? '127.0.0.1' : '0.0.0.0');
+    // Listen BEFORE any async identity bootstrap (M5): the cluster's
+    // waitForHealthy is a 30s window and must see the port up promptly.
+    const server = await new Promise((resolve, reject) => {
+        const created = app.listen(port, host, () => {
+            logger('serveApp.listening', { mode, host, port, mountDirectRouter });
+            resolve(created);
+        });
+        created.on('error', reject);
+    });
+    // Standalone connects the Relay AFTER the HTTP surface is live. connectRelay
+    // is non-blocking (returns a handle, connects in the background).
+    if (mode === 'standalone-production') {
+        const doConnect = options.__test?.connectRelay ?? connectRelay;
+        relayRef.current = doConnect({
+            privosUrl: loaded.relay.privosUrl,
+            standaloneIdentity: identityController,
+            descriptor: options.descriptor,
+            handler,
+            ui: options.ui,
+            logger: (event, fields) => logger(event, fields),
+        });
+    }
+    // Managed: warm the workload attestation in the background (the post-listen
+    // bootstrap the SDK's startHttpIngress does) and keep it fresh, so /ready
+    // reads a converged LAST-KNOWN-GOOD cache instead of forcing a synchronous
+    // broker token mint on every probe. dispose() stops the monitor.
+    if (mode === 'managed' && workloadIdentityClient) {
+        void workloadIdentityClient.getEffectiveCapabilities({ forceRefresh: true }).catch(() => undefined);
+        workloadIdentityClient.startCapabilityMonitor(30_000);
+    }
+    let signalHandlers = [];
+    const handle = {
+        mode,
+        server,
+        relayHandle: relayRef.current,
+        readiness,
+        async close() {
+            for (const { signal, handler: fn } of signalHandlers)
+                process.removeListener(signal, fn);
+            signalHandlers = [];
+            if (relayRef.current)
+                await relayRef.current.stop();
+            await new Promise((resolve, reject) => {
+                server.close((error) => (error ? reject(error) : resolve()));
+            });
+            workloadIdentityClient?.dispose();
+        },
+    };
+    if (options.installSignalHandlers ?? true) {
+        for (const signal of ['SIGTERM', 'SIGINT']) {
+            const fn = () => {
+                logger('serveApp.shutdown', { signal });
+                handle.close().catch((error) => {
+                    logger('serveApp.shutdown_failed', { error: String(error) });
+                    process.exitCode = 1;
+                });
+            };
+            process.once(signal, fn);
+            signalHandlers.push({ signal, handler: fn });
+        }
+    }
+    return handle;
+}
+function buildReadiness(input) {
+    if (input.mode === 'managed') {
+        const client = input.workloadIdentityClient;
+        // Read the LAST-KNOWN-GOOD attestation (no broker round-trip). The Docker
+        // HEALTHCHECK probes /ready every 30s with a 3s timeout, so it must not
+        // force a synchronous token mint that a transient broker latency spike
+        // could push past the timeout and flap the container. Freshness comes from
+        // the background capability monitor `serveApp` starts after listen.
+        return async () => {
+            const caps = client.peekEffectiveCapabilities();
+            const ok = caps.status === 'paired' || caps.status === 'active';
+            return {
+                ok,
+                status: ok ? 200 : 503,
+                body: {
+                    mode: 'managed',
+                    workload: caps.status,
+                    scopes: caps.scopes.length,
+                    ...(caps.reason ? { reason: caps.reason } : {}),
+                },
+            };
+        };
+    }
+    if (input.mode === 'standalone-production') {
+        const check = createStandaloneReadinessCheck({
+            isRelayAuthenticated: () => input.relayRef.current?.isConnected() ?? false,
+            resolveManifest: input.resolveManifest,
+        });
+        return async () => {
+            const result = await check();
+            return { ok: result.ok, status: result.status, body: result.body };
+        };
+    }
+    // development: trivial 200 — no trust to attest, unsigned local surface.
+    return async () => ({ ok: true, status: 200, body: { mode: 'development' } });
+}
+//# sourceMappingURL=serve-app.js.map

package/dist/serve-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-app.js","sourceRoot":"","sources":["../src/serve-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,OAAyB,MAAM,SAAS,CAAC;AAGhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAA6B,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EACN,uBAAuB,EACvB,oCAAoC,EACpC,2CAA2C,GAE3C,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAoB,MAAM,yBAAyB,CAAC;AACzE,OAAO,EACN,uCAAuC,GAEvC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,sBAAsB,GAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAoB,MAAM,mBAAmB,CAAC;AAE3F,OAAO,EACN,yBAAyB,GAEzB,MAAM,iCAAiC,CAAC;AAEzC,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAyE3C,SAAS,aAAa,CAAC,KAAa,EAAE,MAA+B;IACpE,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACrF,OAAO,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC;AACF,CAAC;AAED,2HAA2H;AAC3H,SAAS,oBAAoB,CAAC,GAAsB;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC;IAC3B,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,uBAAuB;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAwB;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,kBAAkB,IAAI,kBAAkB,CAAC;IAE7E,6EAA6E;IAC7E,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,MAAM,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAEtE,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACvE,qEAAqE;QACrE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,IAAI,gBAAgB,CACzB,gCAAgC,EAChC,2DAA2D,IAAI,+BAA+B;YAC7F,8FAA8F,CAC/F,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,+CAA+C;IAC/C,IAAI,sBAA0D,CAAC;IAC/D,IAAI,WAA+B,CAAC;IACpC,IAAI,gBAAmD,CAAC;IACxD,IAAI,MAA4C,CAAC;IACjD,IAAI,kBAAiE,CAAC;IACtE,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,yBAAyB,IAAI,yBAAyB,CAAC;QACzF,sBAAsB,GAAG,SAAS,EAAE,CAAC;QACrC,gBAAgB,GAAG,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC;gBACJ,OAAO,CAAC,MAAM,sBAAuB,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,SAAS,CAAC;YAClB,CAAC;QACF,CAAC,CAAC;QACF,WAAW,GAAG,2CAA2C,CAAC,sBAAsB,CAAC,CAAC;QAClF,iBAAiB,GAAG,IAAI,CAAC;IAC1B,CAAC;SAAM,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,sBAAsB,IAAI,sBAAsB,CAAC;QAC9E,MAAM,GAAG,IAAI,EAAE,CAAC;QAChB,uEAAuE;QACvE,uEAAuE;QACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,kBAAkB;YAAE,4BAA4B,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACzG,MAAM,cAAc,GACnB,OAAO,CAAC,MAAM,EAAE,uCAAuC,IAAI,uCAAuC,CAAC;QACpG,kBAAkB,GAAG,cAAc,CAAC,MAAM,EAAE;YAC3C,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;SAChD,CAAC,CAAC;QACH,gBAAgB,GAAG,KAAK,IAAI,EAAE,CAAC,MAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACvD,WAAW,GAAG,oCAAoC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3E,iBAAiB,GAAG,KAAK,CAAC,CAAC,6BAA6B;IACzD,CAAC;SAAM,CAAC;QACP,gBAAgB,GAAG,KAAK,IAAI,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzD,WAAW,GAAG,uBAAuB,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5D,mEAAmE;QACnE,qEAAqE;QACrE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC;IAC3D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI;QACJ,WAAW;QACX,sBAAsB;QACtB,gBAAgB;KAChB,CAAC,CAAC;IAEH,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,cAAc,CAAC;QAChC,IAAI;QACJ,sBAAsB;QACtB,QAAQ;QACR,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,uBAAuB;KACnE,CAAC,CAAC;IAEH,oEAAoE;IACpE,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3C,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;YACxD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,CAAC,CAAC;QACb,CAAC;IACF,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,SAAS;QAAE,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,iBAAiB,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CACN,kBAAkB,CAAC;YAClB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;YACP,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,qEAAqE;YACrE,gEAAgE;YAChE,kEAAkE;YAClE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAmB,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChG,CAAC,CACF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACtF,6EAA6E;IAC7E,wEAAwE;IACxE,+EAA+E;IAC/E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACrF,8EAA8E;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEhF,iEAAiE;IACjE,oEAAoE;IACpE,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACtE,OAAO,CAAC,OAAO,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,YAAY,CAAC;QAC/D,QAAQ,CAAC,OAAO,GAAG,SAAS,CAAC;YAC5B,SAAS,EAAE,MAAO,CAAC,KAAK,CAAC,SAAS;YAClC,kBAAkB,EAAE,kBAAkB;YACtC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO;YACP,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC;SAChD,CAAC,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,iEAAiE;IACjE,IAAI,IAAI,KAAK,SAAS,IAAI,sBAAsB,EAAE,CAAC;QAClD,KAAK,sBAAsB,CAAC,wBAAwB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpG,sBAAsB,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,cAAc,GAAsD,EAAE,CAAC;IAC3E,MAAM,MAAM,GAAmB;QAC9B,IAAI;QACJ,MAAM;QACN,WAAW,EAAE,QAAQ,CAAC,OAAO;QAC7B,SAAS;QACT,KAAK,CAAC,KAAK;YACV,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,cAAc;gBAAE,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzF,cAAc,GAAG,EAAE,CAAC;YACpB,IAAI,QAAQ,CAAC,OAAO;gBAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;YACH,sBAAsB,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;KACD,CAAC;IAEF,IAAI,OAAO,CAAC,qBAAqB,IAAI,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;YACrD,MAAM,EAAE,GAAG,GAAG,EAAE;gBACf,MAAM,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC9B,MAAM,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACtB,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAKvB;IACA,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,sBAAuB,CAAC;QAC7C,0EAA0E;QAC1E,wEAAwE;QACxE,uEAAuE;QACvE,2EAA2E;QAC3E,oEAAoE;QACpE,OAAO,KAAK,IAAI,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,yBAAyB,EAAE,CAAC;YAChD,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC;YAChE,OAAO;gBACN,EAAE;gBACF,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACtB,IAAI,EAAE;oBACL,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,IAAI,CAAC,MAAM;oBACrB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;oBAC1B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/C;aACD,CAAC;QACH,CAAC,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,8BAA8B,CAAC;YAC5C,oBAAoB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,KAAK;YAC1E,eAAe,EAAE,KAAK,CAAC,eAAe;SACtC,CAAC,CAAC;QACH,OAAO,KAAK,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACpE,CAAC,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privos_ai/app-server",
-  "version": "0.6.2",
+  "version": "0.7.1",
   "description": "Business-agnostic PrivOS MCP App server runtime — Direct HTTP + Relay WebSocket",
   "type": "module",
   "main": "./dist/index.js",