@profullstack/agenticjobs 0.1.0

package/dist/server/routes/descriptor.js

@@ -0,0 +1,31 @@
+/**
+ * What this instance says about itself at /.well-known/agenticjobs.
+ *
+ * Built from live counts rather than from configuration, so an instance cannot
+ * advertise a hundred openings it does not have. The directory re-reads this
+ * on its own schedule; nothing here is cached longer than a request.
+ */
+import { SOFTWARE_NAME } from "../../config.js";
+import { countJobs } from "../../core/jobs.js";
+import { PROTOCOL_VERSION } from "../../schema/instance.js";
+export async function descriptorFor(pool, config) {
+    const jobs = await countJobs(pool);
+    return {
+        protocol: PROTOCOL_VERSION,
+        url: config.publicUrl,
+        name: config.boardName,
+        tagline: config.boardTagline,
+        topics: config.topics,
+        software: { name: SOFTWARE_NAME, version: config.version },
+        jobs,
+        endpoints: {
+            search: `${config.publicUrl}/api/v1/jobs`,
+            openapi: `${config.publicUrl}/api/v1/openapi.json`,
+            mcp: `${config.publicUrl}/api/mcp`,
+            feed: `${config.publicUrl}/jobs.json`,
+        },
+        directory: config.isDirectory,
+        contact: null,
+    };
+}
+//# sourceMappingURL=descriptor.js.map

package/dist/server/routes/descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.js","sourceRoot":"","sources":["../../../src/server/routes/descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAA2B,MAAM,0BAA0B,CAAC;AAErF,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO;QACL,QAAQ,EAAE,gBAAgB;QAC1B,GAAG,EAAE,MAAM,CAAC,SAAS;QACrB,IAAI,EAAE,MAAM,CAAC,SAAS;QACtB,OAAO,EAAE,MAAM,CAAC,YAAY;QAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;QAC1D,IAAI;QACJ,SAAS,EAAE;YACT,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,cAAc;YACzC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,sBAAsB;YAClD,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,UAAU;YAClC,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,YAAY;SACtC;QACD,SAAS,EAAE,MAAM,CAAC,WAAW;QAC7B,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/server/routes/discovery.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Everything a machine reads without being told to: the instance descriptor,
+ * feeds, the sitemap, robots.txt, llms.txt, the web app manifest and the
+ * service worker.
+ *
+ * These are not an afterthought on a board whose whole pitch is being
+ * readable. The descriptor is the federation contract; llms.txt is the one
+ * file a model fetches when it has no other instructions.
+ */
+import { Hono } from 'hono';
+import type { AppEnv } from '../deps.ts';
+export declare function discoveryRoutes(): Hono<AppEnv>;

package/dist/server/routes/discovery.js

@@ -0,0 +1,305 @@
+/**
+ * Everything a machine reads without being told to: the instance descriptor,
+ * feeds, the sitemap, robots.txt, llms.txt, the web app manifest and the
+ * service worker.
+ *
+ * These are not an afterthought on a board whose whole pitch is being
+ * readable. The descriptor is the federation contract; llms.txt is the one
+ * file a model fetches when it has no other instructions.
+ */
+import { Hono } from 'hono';
+import { readFile } from 'node:fs/promises';
+import { dirname, extname, join, normalize } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { countJobs, searchJobs } from "../../core/jobs.js";
+import { parseQuery } from "../../schema/query.js";
+import { WELL_KNOWN_PATH } from "../../schema/instance.js";
+import { jobPostingJsonLd } from "../../schema/jsonld.js";
+import { escapeHtml } from "../../markup/escape.js";
+import { toPlainText } from "../../markup/markdown.js";
+import { descriptorFor } from "./descriptor.js";
+function publicDir() {
+    // dist/server/routes/discovery.js -> package root -> web/public
+    return join(dirname(dirname(dirname(dirname(fileURLToPath(import.meta.url))))), 'web', 'public');
+}
+const MIME = {
+    '.css': 'text/css; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.webmanifest': 'application/manifest+json',
+    '.txt': 'text/plain; charset=utf-8',
+    '.json': 'application/json',
+};
+export function discoveryRoutes() {
+    const routes = new Hono();
+    routes.get('/assets/:file', async (c) => {
+        const requested = c.req.param('file');
+        // normalize collapses any traversal before it is joined, so a name like
+        // "..%2f..%2fetc%2fpasswd" resolves to a bare filename and misses.
+        const name = normalize(requested).replace(/^(\.\.[/\\])+/, '');
+        if (name.includes('/') || name.includes('\\'))
+            return c.notFound();
+        try {
+            const body = await readFile(join(publicDir(), name));
+            return c.body(body, 200, {
+                'content-type': MIME[extname(name)] ?? 'application/octet-stream',
+                'cache-control': 'public, max-age=3600',
+            });
+        }
+        catch {
+            return c.notFound();
+        }
+    });
+    routes.get(WELL_KNOWN_PATH, async (c) => {
+        const { pool, config } = c.get('deps');
+        return c.json(await descriptorFor(pool, config), 200, {
+            // Read by other instances on a schedule, so a short cache is polite and
+            // a long one would make a new job invisible to the network for an hour.
+            'cache-control': 'public, max-age=60',
+            'access-control-allow-origin': '*',
+        });
+    });
+    routes.get('/jobs.json', async (c) => {
+        const { pool, config } = c.get('deps');
+        const query = { ...parseQuery(new URL(c.req.url).searchParams), limit: 100 };
+        const page = await searchJobs(pool, query);
+        // JSON Feed, so an ordinary feed reader can follow a job board.
+        return c.json({
+            version: 'https://jsonfeed.org/version/1.1',
+            title: `${config.boardName} - open roles`,
+            home_page_url: config.publicUrl,
+            feed_url: `${config.publicUrl}/jobs.json`,
+            description: config.boardTagline,
+            items: page.items.map((job) => ({
+                id: `${config.publicUrl}/jobs/${job.slug}`,
+                url: `${config.publicUrl}/jobs/${job.slug}`,
+                title: `${job.title} at ${job.org.name}`,
+                content_text: toPlainText(job.description, 600),
+                date_published: job.publishedAt ?? job.createdAt,
+                tags: [...job.tags, ...job.stack, job.workplace, job.employmentType],
+                authors: [{ name: job.org.name }],
+                _agenticjobs: {
+                    agentPolicy: job.agentPolicy,
+                    applyVia: job.apply.via,
+                    jsonld: jobPostingJsonLd(job, config.publicUrl),
+                },
+            })),
+        }, 200, { 'access-control-allow-origin': '*' });
+    });
+    routes.get('/jobs.rss', async (c) => {
+        const { pool, config } = c.get('deps');
+        const page = await searchJobs(pool, { ...parseQuery(new URLSearchParams()), limit: 100 });
+        const items = page.items
+            .map((job) => {
+            const url = `${config.publicUrl}/jobs/${job.slug}`;
+            return [
+                '    <item>',
+                `      <title>${escapeHtml(`${job.title} at ${job.org.name}`)}</title>`,
+                `      <link>${escapeHtml(url)}</link>`,
+                `      <guid isPermaLink="true">${escapeHtml(url)}</guid>`,
+                `      <pubDate>${new Date(job.publishedAt ?? job.createdAt).toUTCString()}</pubDate>`,
+                `      <description>${escapeHtml(toPlainText(job.description, 500))}</description>`,
+                '    </item>',
+            ].join('\n');
+        })
+            .join('\n');
+        const xml = [
+            '<?xml version="1.0" encoding="UTF-8"?>',
+            '<rss version="2.0">',
+            '  <channel>',
+            `    <title>${escapeHtml(config.boardName)}</title>`,
+            `    <link>${escapeHtml(config.publicUrl)}</link>`,
+            `    <description>${escapeHtml(config.boardTagline)}</description>`,
+            items,
+            '  </channel>',
+            '</rss>',
+        ].join('\n');
+        return c.body(xml, 200, { 'content-type': 'application/rss+xml; charset=utf-8' });
+    });
+    /**
+     * A sitemap index plus monthly chunks, even for a small board.
+     *
+     * The shape does not change as the board grows, so nobody has to migrate a
+     * flat sitemap the week it passes 50,000 URLs.
+     */
+    routes.get('/sitemap.xml', async (c) => {
+        const { pool, config } = c.get('deps');
+        const months = await pool.query(`select to_char(published_at, 'YYYY-MM') as month, max(published_at)::text as latest
+         from jobs
+        where status = 'published' and published_at is not null
+        group by 1 order by 1 desc`);
+        const entries = months.rows
+            .map((row) => `  <sitemap><loc>${config.publicUrl}/sitemaps/${row.month}.xml</loc><lastmod>${new Date(row.latest).toISOString()}</lastmod></sitemap>`)
+            .join('\n');
+        const xml = [
+            '<?xml version="1.0" encoding="UTF-8"?>',
+            '<sitemapindex xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">',
+            `  <sitemap><loc>${config.publicUrl}/sitemaps/pages.xml</loc></sitemap>`,
+            entries,
+            '</sitemapindex>',
+        ].join('\n');
+        return c.body(xml, 200, { 'content-type': 'application/xml; charset=utf-8' });
+    });
+    routes.get('/sitemaps/:name', async (c) => {
+        const { pool, config } = c.get('deps');
+        const name = c.req.param('name').replace(/\.xml$/, '');
+        if (name === 'pages') {
+            const paths = ['/', '/employers', '/docs', '/docs/openresume', '/docs/openjob'];
+            if (c.get('deps').config.isDirectory)
+                paths.push('/network');
+            return c.body(urlset(paths.map((path) => ({ loc: `${config.publicUrl}${path}` }))), 200, {
+                'content-type': 'application/xml; charset=utf-8',
+            });
+        }
+        if (!/^\d{4}-\d{2}$/.test(name))
+            return c.notFound();
+        const jobs = await pool.query(`select slug, updated_at from jobs
+        where status = 'published' and published_at is not null
+          and to_char(published_at, 'YYYY-MM') = $1
+        order by published_at desc limit 50000`, [name]);
+        return c.body(urlset(jobs.rows.map((row) => ({
+            loc: `${config.publicUrl}/jobs/${row.slug}`,
+            lastmod: new Date(row.updated_at).toISOString(),
+        }))), 200, { 'content-type': 'application/xml; charset=utf-8' });
+    });
+    routes.get('/robots.txt', (c) => {
+        const { config } = c.get('deps');
+        return c.text([
+            'User-agent: *',
+            'Allow: /',
+            // The dashboards hold one person's own data and are noindex anyway;
+            // saying so here saves the crawl.
+            'Disallow: /me',
+            'Disallow: /device',
+            'Disallow: /auth/',
+            '',
+            `Sitemap: ${config.publicUrl}/sitemap.xml`,
+            '',
+        ].join('\n'));
+    });
+    /**
+     * llms.txt.
+     *
+     * The point of this board is that a model does not have to guess, so this
+     * says plainly what is here, what is not, and which two endpoints matter.
+     */
+    routes.get('/llms.txt', async (c) => {
+        const { pool, config } = c.get('deps');
+        const counts = await countJobs(pool);
+        return c.text([
+            `# ${config.boardName}`,
+            '',
+            `> ${config.boardTagline}`,
+            '',
+            `An agent-friendly job board with ${counts.open} open roles. Every listing was posted`,
+            'here by the employer. Nothing is scraped from anywhere else, so an empty search means',
+            'nobody has posted that job rather than that a crawler missed it.',
+            '',
+            'Reads need no credentials.',
+            '',
+            '## Start here',
+            '',
+            `- [Instance descriptor](${config.publicUrl}${WELL_KNOWN_PATH}): what this board is and where everything lives`,
+            `- [OpenAPI](${config.publicUrl}/api/v1/openapi.json): every endpoint`,
+            `- [Search](${config.publicUrl}/api/v1/jobs?q=): q, workplace, employmentType, seniority, agentPolicy, tag, salaryMin`,
+            `- [Feed](${config.publicUrl}/jobs.json): the 100 most recent, as JSON Feed`,
+            '',
+            '## Applying',
+            '',
+            `GET ${config.publicUrl}/api/v1/jobs/{slug}/apply-schema for the exact fields, then POST`,
+            `them to ${config.publicUrl}/api/v1/jobs/{slug}/apply.`,
+            '',
+            'Every listing declares an agent policy: welcome, disclose or human-only. If it is',
+            '"disclose", send an `agent` object saying which agent wrote the application. Disclosing',
+            'is not held against a candidate on a board that asked for it.',
+            '',
+            'Resumes are Markdown in the OpenResume.md convention:',
+            `${config.publicUrl}/docs/openresume`,
+            '',
+            '## MCP',
+            '',
+            `${config.publicUrl}/api/mcp (streamable HTTP)`,
+            '',
+            ...(config.isDirectory
+                ? [
+                    '## The network',
+                    '',
+                    `This instance is also a directory. ${config.publicUrl}/api/v1/directory/search asks`,
+                    'every listed board one question at once.',
+                    '',
+                ]
+                : []),
+            '## Software',
+            '',
+            'MIT licensed, self-hostable: https://github.com/profullstack/agenticjobs',
+            '',
+        ].join('\n'));
+    });
+    routes.get('/manifest.webmanifest', (c) => {
+        const { config } = c.get('deps');
+        return c.json({
+            name: config.boardName,
+            short_name: config.boardName.slice(0, 12),
+            description: config.boardTagline,
+            start_url: '/',
+            scope: '/',
+            display: 'standalone',
+            background_color: '#ffffff',
+            theme_color: '#111318',
+            icons: [
+                { src: '/assets/icon.svg', sizes: 'any', type: 'image/svg+xml', purpose: 'any' },
+                { src: '/assets/icon-192.png', sizes: '192x192', type: 'image/png' },
+                { src: '/assets/icon-512.png', sizes: '512x512', type: 'image/png' },
+            ],
+            shortcuts: [
+                { name: 'Post a job', url: '/post' },
+                { name: 'Your resumes', url: '/me' },
+            ],
+        }, 200, { 'content-type': 'application/manifest+json' });
+    });
+    /**
+     * The service worker, served from the root so its scope is the whole site.
+     *
+     * A worker served from /assets/ can only ever control /assets/, which is the
+     * single most common reason a PWA installs and then does nothing offline.
+     */
+    routes.get('/sw.js', async (c) => {
+        try {
+            const body = await readFile(join(publicDir(), 'sw.js'), 'utf8');
+            return c.body(body, 200, {
+                'content-type': 'text/javascript; charset=utf-8',
+                // Never cached: a stale worker is a site that cannot be updated.
+                'cache-control': 'no-cache',
+                'service-worker-allowed': '/',
+            });
+        }
+        catch {
+            return c.notFound();
+        }
+    });
+    routes.get('/.well-known/security.txt', (c) => {
+        const { config } = c.get('deps');
+        const expires = new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString();
+        return c.text([
+            `Contact: ${config.publicUrl}/docs`,
+            `Expires: ${expires}`,
+            'Preferred-Languages: en',
+            `Canonical: ${config.publicUrl}/.well-known/security.txt`,
+            '',
+        ].join('\n'));
+    });
+    return routes;
+}
+function urlset(entries) {
+    const body = entries
+        .map((entry) => `  <url><loc>${escapeHtml(entry.loc)}</loc>${entry.lastmod === undefined ? '' : `<lastmod>${entry.lastmod}</lastmod>`}</url>`)
+        .join('\n');
+    return [
+        '<?xml version="1.0" encoding="UTF-8"?>',
+        '<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">',
+        body,
+        '</urlset>',
+    ].join('\n');
+}
+//# sourceMappingURL=discovery.js.map

package/dist/server/routes/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/server/routes/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,SAAS,SAAS;IAChB,gEAAgE;IAChE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,IAAI,GAA2B;IACnC,MAAM,EAAE,yBAAyB;IACjC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,cAAc,EAAE,2BAA2B;IAC3C,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,IAAI,IAAI,EAAU,CAAC;IAElC,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvB,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,0BAA0B;gBACjE,eAAe,EAAE,sBAAsB;aACxC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE;YACpD,wEAAwE;YACxE,wEAAwE;YACxE,eAAe,EAAE,oBAAoB;YACrC,6BAA6B,EAAE,GAAG;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,EAAE,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,gEAAgE;QAChE,OAAO,CAAC,CAAC,IAAI,CACX;YACE,OAAO,EAAE,kCAAkC;YAC3C,KAAK,EAAE,GAAG,MAAM,CAAC,SAAS,eAAe;YACzC,aAAa,EAAE,MAAM,CAAC,SAAS;YAC/B,QAAQ,EAAE,GAAG,MAAM,CAAC,SAAS,YAAY;YACzC,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC9B,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,SAAS,GAAG,CAAC,IAAI,EAAE;gBAC1C,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,SAAS,GAAG,CAAC,IAAI,EAAE;gBAC3C,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE;gBACxC,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC;gBAC/C,cAAc,EAAE,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS;gBAChD,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC;gBACpE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACjC,YAAY,EAAE;oBACZ,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;oBACvB,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC;iBAChD;aACF,CAAC,CAAC;SACJ,EACD,GAAG,EACH,EAAE,6BAA6B,EAAE,GAAG,EAAE,CACvC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,CAAC,IAAI,eAAe,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;aACrB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,SAAS,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC;YACnD,OAAO;gBACL,YAAY;gBACZ,gBAAgB,UAAU,CAAC,GAAG,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU;gBACvE,eAAe,UAAU,CAAC,GAAG,CAAC,SAAS;gBACvC,kCAAkC,UAAU,CAAC,GAAG,CAAC,SAAS;gBAC1D,kBAAkB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,YAAY;gBACtF,sBAAsB,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,gBAAgB;gBACnF,aAAa;aACd,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,MAAM,GAAG,GAAG;YACV,wCAAwC;YACxC,qBAAqB;YACrB,aAAa;YACb,cAAc,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU;YACpD,aAAa,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS;YAClD,oBAAoB,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB;YACnE,KAAK;YACL,cAAc;YACd,QAAQ;SACT,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;;;mCAG6B,CAC9B,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI;aACxB,GAAG,CACF,CAAC,GAAG,EAAE,EAAE,CACN,mBAAmB,MAAM,CAAC,SAAS,aAAa,GAAG,CAAC,KAAK,sBAAsB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,sBAAsB,CAC1I;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,GAAG,GAAG;YACV,wCAAwC;YACxC,oEAAoE;YACpE,mBAAmB,MAAM,CAAC,SAAS,qCAAqC;YACxE,OAAO;YACP,iBAAiB;SAClB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEvD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;YAChF,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7D,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE;gBACvF,cAAc,EAAE,gCAAgC;aACjD,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAC3B;;;+CAGyC,EACzC,CAAC,IAAI,CAAC,CACP,CAAC;QACF,OAAO,CAAC,CAAC,IAAI,CACX,MAAM,CACJ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtB,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,SAAS,GAAG,CAAC,IAAI,EAAE;YAC3C,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;SAChD,CAAC,CAAC,CACJ,EACD,GAAG,EACH,EAAE,cAAc,EAAE,gCAAgC,EAAE,CACrD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,IAAI,CACX;YACE,eAAe;YACf,UAAU;YACV,oEAAoE;YACpE,kCAAkC;YAClC,eAAe;YACf,mBAAmB;YACnB,kBAAkB;YAClB,EAAE;YACF,YAAY,MAAM,CAAC,SAAS,cAAc;YAC1C,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC,IAAI,CACX;YACE,KAAK,MAAM,CAAC,SAAS,EAAE;YACvB,EAAE;YACF,KAAK,MAAM,CAAC,YAAY,EAAE;YAC1B,EAAE;YACF,oCAAoC,MAAM,CAAC,IAAI,uCAAuC;YACtF,uFAAuF;YACvF,kEAAkE;YAClE,EAAE;YACF,4BAA4B;YAC5B,EAAE;YACF,eAAe;YACf,EAAE;YACF,2BAA2B,MAAM,CAAC,SAAS,GAAG,eAAe,kDAAkD;YAC/G,eAAe,MAAM,CAAC,SAAS,uCAAuC;YACtE,cAAc,MAAM,CAAC,SAAS,wFAAwF;YACtH,YAAY,MAAM,CAAC,SAAS,gDAAgD;YAC5E,EAAE;YACF,aAAa;YACb,EAAE;YACF,OAAO,MAAM,CAAC,SAAS,kEAAkE;YACzF,WAAW,MAAM,CAAC,SAAS,4BAA4B;YACvD,EAAE;YACF,mFAAmF;YACnF,yFAAyF;YACzF,+DAA+D;YAC/D,EAAE;YACF,uDAAuD;YACvD,GAAG,MAAM,CAAC,SAAS,kBAAkB;YACrC,EAAE;YACF,QAAQ;YACR,EAAE;YACF,GAAG,MAAM,CAAC,SAAS,4BAA4B;YAC/C,EAAE;YACF,GAAG,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC;oBACE,gBAAgB;oBAChB,EAAE;oBACF,sCAAsC,MAAM,CAAC,SAAS,+BAA+B;oBACrF,0CAA0C;oBAC1C,EAAE;iBACH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,aAAa;YACb,EAAE;YACF,0EAA0E;YAC1E,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,EAAE;QACxC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,IAAI,CACX;YACE,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACzC,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,SAAS,EAAE,GAAG;YACd,KAAK,EAAE,GAAG;YACV,OAAO,EAAE,YAAY;YACrB,gBAAgB,EAAE,SAAS;YAC3B,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE;gBACL,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE;gBAChF,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;gBACpE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;aACrE;YACD,SAAS,EAAE;gBACT,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE;gBACpC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,KAAK,EAAE;aACrC;SACF,EACD,GAAG,EACH,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAChE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvB,cAAc,EAAE,gCAAgC;gBAChD,iEAAiE;gBACjE,eAAe,EAAE,UAAU;gBAC3B,wBAAwB,EAAE,GAAG;aAC9B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,2BAA2B,EAAE,CAAC,CAAC,EAAE,EAAE;QAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/E,OAAO,CAAC,CAAC,IAAI,CACX;YACE,YAAY,MAAM,CAAC,SAAS,OAAO;YACnC,YAAY,OAAO,EAAE;YACrB,yBAAyB;YACzB,cAAc,MAAM,CAAC,SAAS,2BAA2B;YACzD,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,OAA4C;IAC1D,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,eAAe,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,OAAO,YAAY,QAAQ,CAChI;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,wCAAwC;QACxC,8DAA8D;QAC9D,IAAI;QACJ,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/server/routes/mcp.d.ts

@@ -0,0 +1,19 @@
+/**
+ * MCP over streamable HTTP.
+ *
+ * The tools dispatch back through this same app rather than reaching into the
+ * database, so an assistant gets the same code and the same permission checks
+ * a browser does. The app has to dispatch into itself, which is a cycle the
+ * module graph cannot express - so createApp passes a getter that is filled in
+ * once the app exists.
+ *
+ * Bearer tokens are honoured and cookies are deliberately ignored. Browsers
+ * attach cookies to cross-origin POSTs, so honouring one would turn this
+ * endpoint into a write primitive for any page on the web.
+ */
+import { Hono } from 'hono';
+import type { AppEnv } from '../deps.ts';
+export interface Dispatcher {
+    fetch(request: Request): Response | Promise<Response>;
+}
+export declare function mcpRoutes(getApp: () => Dispatcher): Hono<AppEnv>;

package/dist/server/routes/mcp.js

@@ -0,0 +1,85 @@
+/**
+ * MCP over streamable HTTP.
+ *
+ * The tools dispatch back through this same app rather than reaching into the
+ * database, so an assistant gets the same code and the same permission checks
+ * a browser does. The app has to dispatch into itself, which is a cycle the
+ * module graph cannot express - so createApp passes a getter that is filled in
+ * once the app exists.
+ *
+ * Bearer tokens are honoured and cookies are deliberately ignored. Browsers
+ * attach cookies to cross-origin POSTs, so honouring one would turn this
+ * endpoint into a write primitive for any page on the web.
+ */
+import { Hono } from 'hono';
+import { SOFTWARE_NAME } from "../../config.js";
+import { handleMessage } from "../../mcp/server.js";
+export function mcpRoutes(getApp) {
+    const routes = new Hono();
+    routes.post('/', async (c) => {
+        const { config } = c.get('deps');
+        let payload;
+        try {
+            payload = await c.req.json();
+        }
+        catch {
+            return c.json({ jsonrpc: '2.0', id: null, error: { code: -32700, message: 'Invalid JSON.' } }, 400);
+        }
+        const authorization = c.req.header('authorization');
+        // Built from the request's own origin rather than PUBLIC_URL, so loopback
+        // works behind a proxy, on a laptop and in tests, where the configured
+        // public URL is not necessarily the one answering.
+        const origin = new URL(c.req.url).origin;
+        const caller = {
+            server: config.publicUrl,
+            authenticated: authorization !== undefined,
+            call: async (method, path, body) => {
+                const headers = { accept: 'application/json' };
+                if (authorization !== undefined)
+                    headers['authorization'] = authorization;
+                if (body !== undefined)
+                    headers['content-type'] = 'application/json';
+                const response = await getApp().fetch(new Request(new URL(path, origin), {
+                    method,
+                    headers,
+                    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+                }));
+                const raw = await response.text();
+                try {
+                    return { status: response.status, body: JSON.parse(raw) };
+                }
+                catch {
+                    // A non-JSON body from our own API means a route returned HTML,
+                    // which is worth surfacing verbatim rather than hiding.
+                    return { status: response.status, body: raw };
+                }
+            },
+        };
+        const info = { name: `${SOFTWARE_NAME}-mcp`, version: config.version };
+        // A batch is an array. Notifications inside it produce no reply, and a
+        // batch of nothing but notifications produces no body at all.
+        if (Array.isArray(payload)) {
+            const responses = [];
+            for (const item of payload) {
+                const answer = await handleMessage(item, caller, info);
+                if (answer !== null)
+                    responses.push(answer);
+            }
+            return responses.length === 0 ? c.body(null, 202) : c.json(responses);
+        }
+        const answer = await handleMessage(payload, caller, info);
+        return answer === null ? c.body(null, 202) : c.json(answer);
+    });
+    routes.get('/', (c) => {
+        const { config } = c.get('deps');
+        return c.json({
+            name: `${SOFTWARE_NAME}-mcp`,
+            version: config.version,
+            transport: 'streamable-http',
+            board: config.publicUrl,
+            note: 'POST JSON-RPC 2.0 here. Send a bearer token to act as an account; cookies are ignored on purpose.',
+        });
+    });
+    return routes;
+}
+//# sourceMappingURL=mcp.js.map

package/dist/server/routes/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../src/server/routes/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,MAAM,UAAU,SAAS,CAAC,MAAwB;IAChD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAU,CAAC;IAElC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3B,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEjC,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAC/E,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACpD,0EAA0E;QAC1E,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QAEzC,MAAM,MAAM,GAAW;YACrB,MAAM,EAAE,MAAM,CAAC,SAAS;YACxB,aAAa,EAAE,aAAa,KAAK,SAAS;YAC1C,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;gBACjC,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;gBACvE,IAAI,aAAa,KAAK,SAAS;oBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;gBAC1E,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;gBAErE,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC,KAAK,CACnC,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;oBACjC,MAAM;oBACN,OAAO;oBACP,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;iBAC9D,CAAC,CACH,CAAC;gBACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,EAAE,CAAC;gBACvE,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;oBAChE,wDAAwD;oBACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBAChD,CAAC;YACH,CAAC;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,aAAa,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAEvE,uEAAuE;QACvE,8DAA8D;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;YACrB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;gBACvD,IAAI,MAAM,KAAK,IAAI;oBAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACpB,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,GAAG,aAAa,MAAM;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,iBAAiB;YAC5B,KAAK,EAAE,MAAM,CAAC,SAAS;YACvB,IAAI,EAAE,mGAAmG;SAC1G,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/openapi.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The OpenAPI document, written by hand.
+ *
+ * Hand-written because it is read by people and by models deciding what this
+ * board can do, and a generated one describes the router rather than the
+ * board. test/api.test.ts walks every documented GET against the real routes,
+ * so a path that drifts out of this file fails the suite rather than quietly
+ * lying to whoever reads it.
+ */
+import type { Config } from '../../config.ts';
+export declare function openApiDocument(config: Config): Record<string, unknown>;