@relaycast/engine 1.1.7

package/dist/middleware/logger.js

@@ -0,0 +1,163 @@
+import crypto from 'node:crypto';
+import { createRequestLogger } from '../lib/logger.js';
+import { deriveClientName, extractHarness, extractOriginInfo } from '../lib/origin.js';
+function getExecutionCtx(c) {
+    try {
+        const executionCtx = c.executionCtx;
+        if (executionCtx && typeof executionCtx.waitUntil === 'function')
+            return executionCtx;
+    }
+    catch {
+        // Hono's test context can throw when executionCtx is accessed.
+    }
+    return undefined;
+}
+function sanitizeReason(reason) {
+    return reason.replace(/\s+/g, ' ').trim().slice(0, 200);
+}
+function parseBearerToken(authorization) {
+    if (!authorization)
+        return undefined;
+    const [scheme, rawToken] = authorization.split(' ');
+    if (scheme?.toLowerCase() !== 'bearer' || !rawToken)
+        return undefined;
+    return rawToken;
+}
+function tokenType(token) {
+    if (token.startsWith('at_live_'))
+        return 'agent';
+    if (token.startsWith('rk_live_'))
+        return 'workspace';
+    return 'unknown';
+}
+function hashIdentifier(value) {
+    return crypto.createHash('sha256').update(value).digest('hex').slice(0, 16);
+}
+function routeGroupForPath(path) {
+    if (path === '/v1/ws')
+        return 'ws';
+    if (path === '/mcp')
+        return 'mcp';
+    if (path.startsWith('/v1/'))
+        return 'api_v1';
+    if (path.startsWith('/.well-known/'))
+        return 'well_known';
+    if (path.startsWith('/health'))
+        return 'health';
+    return 'other';
+}
+function classifyAuthScheme(authHeader, queryToken) {
+    if (authHeader) {
+        const bearerToken = parseBearerToken(authHeader);
+        if (!bearerToken)
+            return 'authorization_other';
+        const type = tokenType(bearerToken);
+        if (type === 'agent')
+            return 'bearer_agent_token';
+        if (type === 'workspace')
+            return 'bearer_workspace_key';
+        return 'bearer_unknown';
+    }
+    if (queryToken) {
+        const type = tokenType(queryToken);
+        if (type === 'agent')
+            return 'query_agent_token';
+        if (type === 'workspace')
+            return 'query_workspace_key';
+        return 'query_unknown';
+    }
+    return 'none';
+}
+async function extractErrorInfo(response) {
+    const contentType = response.headers.get('content-type')?.toLowerCase() ?? '';
+    if (!contentType.includes('application/json'))
+        return {};
+    try {
+        const body = await response.clone().json();
+        if (!body || typeof body !== 'object')
+            return {};
+        const maybeError = body.error;
+        if (!maybeError || typeof maybeError !== 'object')
+            return {};
+        const code = maybeError.code;
+        const message = maybeError.message;
+        return {
+            ...(typeof code === 'string' ? { error_code: code } : {}),
+            ...(typeof message === 'string' ? { error_reason: sanitizeReason(message) } : {}),
+        };
+    }
+    catch {
+        return {};
+    }
+}
+function statusClass(statusCode) {
+    if (statusCode >= 500)
+        return '5xx';
+    if (statusCode >= 400)
+        return '4xx';
+    if (statusCode >= 300)
+        return '3xx';
+    if (statusCode >= 200)
+        return '2xx';
+    return '1xx';
+}
+export const loggerMiddleware = async (c, next) => {
+    const requestId = crypto.randomUUID();
+    c.set('requestId', requestId);
+    const requestHeaders = c.req.raw.headers;
+    const clientName = deriveClientName(requestHeaders);
+    const originInfo = extractOriginInfo(c.req.raw, clientName);
+    const harness = extractHarness(requestHeaders);
+    c.set('harness', harness);
+    const logger = createRequestLogger(c, 'request', {
+        request_id: requestId,
+        ...(clientName ? { client_name: clientName } : {}),
+        ...originInfo,
+        harness,
+    });
+    c.set('logger', logger);
+    const startedAt = Date.now();
+    await next();
+    const durationMs = Date.now() - startedAt;
+    const statusCode = c.res.status;
+    const authHeader = requestHeaders.get('authorization') ?? undefined;
+    const queryToken = c.req.query('token');
+    const bearerToken = parseBearerToken(authHeader);
+    const presentedToken = bearerToken ?? queryToken;
+    const authScheme = classifyAuthScheme(authHeader, queryToken);
+    const contentType = requestHeaders.get('content-type');
+    const accept = requestHeaders.get('accept');
+    const connectingIp = requestHeaders.get('cf-connecting-ip');
+    const userAgent = requestHeaders.get('user-agent');
+    const errorInfo = statusCode >= 400 ? await extractErrorInfo(c.res) : {};
+    const metadata = {
+        status_code: statusCode,
+        status_class: statusClass(statusCode),
+        duration_ms: durationMs,
+        route_group: routeGroupForPath(c.req.path),
+        auth_scheme: authScheme,
+        ...(contentType ? { content_type: contentType } : {}),
+        ...(accept ? { accept } : {}),
+        ...(clientName ? { client_name: clientName } : {}),
+        ...(presentedToken ? { actor_fingerprint: hashIdentifier(presentedToken) } : {}),
+        ...(connectingIp ? { ip_hash: hashIdentifier(connectingIp) } : {}),
+        ...(userAgent ? { ua_hash: hashIdentifier(userAgent) } : {}),
+        ...originInfo,
+        harness,
+        ...errorInfo,
+    };
+    if (statusCode >= 500) {
+        logger.error('Request failed', metadata);
+    }
+    else if (statusCode >= 400) {
+        logger.warn('Request client error', metadata);
+    }
+    const flushPromise = logger.flush();
+    const executionCtx = getExecutionCtx(c);
+    if (executionCtx) {
+        executionCtx.waitUntil(flushPromise);
+        return;
+    }
+    void flushPromise;
+};
+//# sourceMappingURL=logger.js.map

package/dist/middleware/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/middleware/logger.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAQvF,SAAS,eAAe,CAAC,CAAU;IACjC,IAAI,CAAC;QACH,MAAM,YAAY,GAAI,CAAsB,CAAC,YAAY,CAAC;QAC1D,IAAI,YAAY,IAAI,OAAO,YAAY,CAAC,SAAS,KAAK,UAAU;YAAE,OAAO,YAAY,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CAAC,aAAiC;IACzD,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,MAAM,EAAE,WAAW,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,WAAW,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,YAAY,CAAC;IAC1D,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA8B,EAAE,UAA8B;IACxF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW;YAAE,OAAO,qBAAqB,CAAC;QAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,oBAAoB,CAAC;QAClD,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,sBAAsB,CAAC;QACxD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,mBAAmB,CAAC;QACjD,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,qBAAqB,CAAC;QACvD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IAChD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC9E,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAa,CAAC;QACtD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QACjD,MAAM,UAAU,GAAI,IAA4B,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAE7D,MAAM,IAAI,GAAI,UAAiC,CAAC,IAAI,CAAC;QACrD,MAAM,OAAO,GAAI,UAAoC,CAAC,OAAO,CAAC;QAC9D,OAAO;YACL,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB;IACrC,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAA8B,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAC3E,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9B,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;IACzC,MAAM,UAAU,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE1B,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,EAAE,SAAS,EAAE;QAC/C,UAAU,EAAE,SAAS;QACrB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,UAAU;QACb,OAAO;KACR,CAAC,CAAC;IACH,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,IAAI,EAAE,CAAC;IAEb,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;IACpE,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,WAAW,IAAI,UAAU,CAAC;IACjD,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzE,MAAM,QAAQ,GAA4B;QACxC,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC;QACrC,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1C,WAAW,EAAE,UAAU;QACvB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,UAAU;QACb,OAAO;QACP,GAAG,SAAS;KACb,CAAC;IAEF,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACtB,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC;SAAM,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,YAAY,EAAE,CAAC;QACjB,YAAY,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,KAAK,YAAY,CAAC;AACpB,CAAC,CAAC"}

package/dist/middleware/planLimits.d.ts

@@ -0,0 +1,5 @@
+import type { AppEnv } from '../env.js';
+import type { UsageMetric } from '../ports/entitlements.js';
+export { PLAN_LIMITS } from '../providers/static-entitlements.js';
+export declare function checkPlanLimit(metric: UsageMetric): import("hono").MiddlewareHandler<AppEnv, string, {}, Response>;
+//# sourceMappingURL=planLimits.d.ts.map

package/dist/middleware/planLimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planLimits.d.ts","sourceRoot":"","sources":["../../src/middleware/planLimits.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAElE,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,kEA6BjD"}

package/dist/middleware/planLimits.js

@@ -0,0 +1,35 @@
+import { createMiddleware } from 'hono/factory';
+// Re-exported for back-compat with callers/tests that imported the table here.
+export { PLAN_LIMITS } from '../providers/static-entitlements.js';
+export function checkPlanLimit(metric) {
+    return createMiddleware(async (c, next) => {
+        const workspace = c.get('workspace');
+        if (!workspace) {
+            await next();
+            return;
+        }
+        const { entitlements } = c.get('engine');
+        const limits = await entitlements.getLimits(workspace);
+        const limit = limits[metric];
+        if (limit === Infinity) {
+            await next();
+            return;
+        }
+        try {
+            const current = await entitlements.getUsage(workspace.id, metric);
+            if (current >= limit) {
+                const plan = workspace.plan || 'free';
+                return c.json({
+                    ok: false,
+                    error: {
+                        code: 'plan_limit_exceeded',
+                        message: `Plan limit exceeded for ${metric}. Current plan: ${plan}. Limit: ${limit}. Current usage: ${current}. Upgrade your plan to increase limits.`,
+                    },
+                }, 429);
+            }
+        }
+        catch { /* fail open */ }
+        await next();
+    });
+}
+//# sourceMappingURL=planLimits.js.map

package/dist/middleware/planLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planLimits.js","sourceRoot":"","sources":["../../src/middleware/planLimits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIhD,+EAA+E;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AAElE,MAAM,UAAU,cAAc,CAAC,MAAmB;IAChD,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEzC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAClE,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC;gBACtC,OAAO,CAAC,CAAC,IAAI,CACX;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE;wBACL,IAAI,EAAE,qBAAqB;wBAC3B,OAAO,EAAE,2BAA2B,MAAM,mBAAmB,IAAI,YAAY,KAAK,oBAAoB,OAAO,yCAAyC;qBACvJ;iBACF,EACD,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAE3B,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/presenceRefresh.d.ts

@@ -0,0 +1,3 @@
+import type { AppEnv } from '../env.js';
+export declare const presenceRefresh: import("hono").MiddlewareHandler<AppEnv, string, {}, Response>;
+//# sourceMappingURL=presenceRefresh.d.ts.map

package/dist/middleware/presenceRefresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenceRefresh.d.ts","sourceRoot":"","sources":["../../src/middleware/presenceRefresh.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,eAAO,MAAM,eAAe,gEAc1B,CAAC"}

package/dist/middleware/presenceRefresh.js

@@ -0,0 +1,18 @@
+import { createMiddleware } from 'hono/factory';
+export const presenceRefresh = createMiddleware(async (c, next) => {
+    try {
+        const agent = c.get('agent');
+        const workspace = c.get('workspace');
+        if (agent && workspace) {
+            // Fire-and-forget heartbeat via the presence port
+            c.get('engine').presence
+                .heartbeat(workspace.id, agent.id, agent.name)
+                .catch(() => { });
+        }
+    }
+    catch {
+        // Don't block the request if presence refresh fails
+    }
+    await next();
+});
+//# sourceMappingURL=presenceRefresh.js.map

package/dist/middleware/presenceRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presenceRefresh.js","sourceRoot":"","sources":["../../src/middleware/presenceRefresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACxE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrC,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;YACvB,kDAAkD;YAClD,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,QAAQ;iBACrB,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC;iBAC7C,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oDAAoD;IACtD,CAAC;IACD,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC,CAAC"}

package/dist/middleware/rateLimit.d.ts

@@ -0,0 +1,3 @@
+import type { AppEnv } from '../env.js';
+export declare const rateLimit: import("hono").MiddlewareHandler<AppEnv, string, {}, Response>;
+//# sourceMappingURL=rateLimit.d.ts.map

package/dist/middleware/rateLimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.d.ts","sourceRoot":"","sources":["../../src/middleware/rateLimit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AA4BxC,eAAO,MAAM,SAAS,gEAkDpB,CAAC"}

package/dist/middleware/rateLimit.js

@@ -0,0 +1,69 @@
+import { createMiddleware } from 'hono/factory';
+// Conservative per-minute ceiling applied when the entitlements lookup fails,
+// so an entitlements outage degrades to a safe default rather than no limit.
+const FALLBACK_RATE_PER_MIN = 300;
+// Per-route rate limit multipliers (fraction of the global per-minute limit).
+// POST endpoints get tighter limits, GET endpoints get looser.
+const ROUTE_MULTIPLIERS = {
+    'POST:/channels/*/messages': 0.5, // message send: half the global limit
+    'POST:/dm': 0.5,
+    'POST:/dm/group': 0.3,
+    'POST:/messages/*/reactions': 0.4,
+    'GET:/channels/*/messages': 1.0,
+    'GET:/agents/presence': 0.3,
+};
+function getRouteKey(method, path) {
+    // Normalize path: /v1/channels/foo/messages -> /channels/*/messages
+    const normalized = path
+        .replace(/^\/v1/, '')
+        .replace(/\/[a-zA-Z0-9_-]+\/messages/, '/*/messages')
+        .replace(/\/[a-zA-Z0-9_-]+\/reactions/, '/*/reactions')
+        .replace(/\/[a-zA-Z0-9_-]+\/replies/, '/*/replies');
+    const key = `${method}:${normalized}`;
+    return ROUTE_MULTIPLIERS[key] !== undefined ? key : null;
+}
+export const rateLimit = createMiddleware(async (c, next) => {
+    const workspace = c.get('workspace');
+    if (!workspace) {
+        await next();
+        return;
+    }
+    const { entitlements, rateLimiter } = c.get('engine');
+    // Apply route-specific multiplier if applicable
+    const routeKey = getRouteKey(c.req.method, c.req.path);
+    // The rate limiter port is not workspace-scoped, so the workspace id is part
+    // of the bucket key (the Cloudflare adapter previously scoped via the DO id).
+    const window = Math.floor(Date.now() / 60000);
+    const bucketKey = `${workspace.id}:${routeKey ?? 'global'}:${window}`;
+    // Resolve the per-minute limit. If entitlements are unavailable, fall back to
+    // a conservative default and still enforce it — an entitlements outage must
+    // NOT translate into unlimited throughput.
+    let globalLimit;
+    try {
+        globalLimit = (await entitlements.getLimits(workspace)).rate_per_min;
+    }
+    catch {
+        globalLimit = FALLBACK_RATE_PER_MIN;
+    }
+    const limit = routeKey ? Math.ceil(globalLimit * ROUTE_MULTIPLIERS[routeKey]) : globalLimit;
+    try {
+        const { allowed, count, remaining } = await rateLimiter.check({ bucketKey, limit, windowMs: 60_000 });
+        c.header('X-RateLimit-Limit', String(limit));
+        c.header('X-RateLimit-Remaining', String(remaining ?? Math.max(0, limit - count)));
+        if (!allowed) {
+            return c.json({
+                ok: false,
+                error: {
+                    code: 'rate_limit_exceeded',
+                    message: `Rate limit exceeded. ${limit} requests per minute allowed for ${workspace.plan} plan.`,
+                },
+            }, 429);
+        }
+    }
+    catch {
+        // Only the limiter backend failing is fail-open — a transient infra hiccup
+        // shouldn't 500 the request (the limit was still computed above).
+    }
+    await next();
+});
+//# sourceMappingURL=rateLimit.js.map

package/dist/middleware/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../src/middleware/rateLimit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,8EAA8E;AAC9E,6EAA6E;AAC7E,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,8EAA8E;AAC9E,+DAA+D;AAC/D,MAAM,iBAAiB,GAA2B;IAChD,2BAA2B,EAAE,GAAG,EAAE,sCAAsC;IACxE,UAAU,EAAE,GAAG;IACf,gBAAgB,EAAE,GAAG;IACrB,4BAA4B,EAAE,GAAG;IACjC,0BAA0B,EAAE,GAAG;IAC/B,sBAAsB,EAAE,GAAG;CAC5B,CAAC;AAEF,SAAS,WAAW,CAAC,MAAc,EAAE,IAAY;IAC/C,oEAAoE;IACpE,MAAM,UAAU,GAAG,IAAI;SACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,4BAA4B,EAAE,aAAa,CAAC;SACpD,OAAO,CAAC,6BAA6B,EAAE,cAAc,CAAC;SACtD,OAAO,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC;IACtC,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IAClE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,EAAE,CAAC;QACb,OAAO;IACT,CAAC;IAED,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAEtD,gDAAgD;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,6EAA6E;IAC7E,8EAA8E;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,GAAG,SAAS,CAAC,EAAE,IAAI,QAAQ,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;IAEtE,8EAA8E;IAC9E,4EAA4E;IAC5E,2CAA2C;IAC3C,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,CAAC,MAAM,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,qBAAqB,CAAC;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAE5F,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACtG,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAEnF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,wBAAwB,KAAK,oCAAoC,SAAS,CAAC,IAAI,QAAQ;iBACjG;aACF,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,kEAAkE;IACpE,CAAC;IAED,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC,CAAC"}

package/dist/middleware/usageTracker.d.ts

@@ -0,0 +1,3 @@
+import type { AppEnv } from '../env.js';
+export declare const usageTracker: import("hono").MiddlewareHandler<AppEnv, string, {}, Response>;
+//# sourceMappingURL=usageTracker.d.ts.map

package/dist/middleware/usageTracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usageTracker.d.ts","sourceRoot":"","sources":["../../src/middleware/usageTracker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,eAAO,MAAM,YAAY,gEAOvB,CAAC"}

package/dist/middleware/usageTracker.js

@@ -0,0 +1,10 @@
+import { createMiddleware } from 'hono/factory';
+export const usageTracker = createMiddleware(async (c, next) => {
+    const workspace = c.get('workspace');
+    if (workspace) {
+        // Fire-and-forget atomic usage increment via the key/value port.
+        c.get('engine').kv.increment(`usage:${workspace.id}:api_calls`, 1).catch(() => { });
+    }
+    await next();
+});
+//# sourceMappingURL=usageTracker.js.map

package/dist/middleware/usageTracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usageTracker.js","sourceRoot":"","sources":["../../src/middleware/usageTracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGhD,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;IACrE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,SAAS,EAAE,CAAC;QACd,iEAAiE;QACjE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,SAAS,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,EAAE,CAAC;AACf,CAAC,CAAC,CAAC"}

package/dist/ports/auth.d.ts

@@ -0,0 +1,45 @@
+import type { workspaces, agents } from '../db/schema.js';
+import type { EngineDb } from './database.js';
+export type Workspace = typeof workspaces.$inferSelect;
+export type Agent = typeof agents.$inferSelect;
+export type AuthRequire = 'workspace' | 'agent' | 'any';
+export type AuthResult = {
+    ok: true;
+    workspace: Workspace;
+    agent?: Agent;
+} | {
+    ok: false;
+    status: number;
+    code: string;
+    message: string;
+};
+/**
+ * Pluggable authentication — the hosting seam.
+ *
+ * Self-host uses the built-in `SqliteApiKeyAuthProvider` (today's
+ * `middleware/auth.ts` logic: SHA-256 hash of `rk_live_`/`at_live_` tokens looked
+ * up in the `workspaces`/`agents` tables). The cloud product injects its own
+ * provider backed by its accounts/billing system — it may validate against the
+ * same gateway D1 or a different identity store entirely. The engine never
+ * assumes how a token maps to a workspace/agent.
+ */
+export interface AuthProvider {
+    /**
+     * Resolve a bearer token to a workspace (and optionally an agent). `require`
+     * narrows the acceptable token kind for routes that demand one specifically.
+     * The engine passes its `db` handle so the default provider can query without
+     * holding its own connection; custom providers may ignore it.
+     */
+    authenticate(args: {
+        token: string;
+        require: AuthRequire;
+        db: EngineDb;
+    }): Promise<AuthResult>;
+    /**
+     * Hash a raw token to its stored form. Used by the `/v1/ws` upgrade and MCP
+     * key handling, which look tokens up directly. Providers that don't use hashed
+     * keys may return the token unchanged.
+     */
+    hashToken(token: string): string;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/ports/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/ports/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,MAAM,SAAS,GAAG,OAAO,UAAU,CAAC,YAAY,CAAC;AACvD,MAAM,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,YAAY,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,OAAO,GAAG,KAAK,CAAC;AAExD,MAAM,MAAM,UAAU,GAClB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAA;CAAE,GACjD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;;;;;;;GASG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,WAAW,CAAC;QAAC,EAAE,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/F;;;;OAIG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CAClC"}

package/dist/ports/auth.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.js.map

package/dist/ports/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/ports/auth.ts"],"names":[],"mappings":""}

package/dist/ports/database.d.ts

@@ -0,0 +1,20 @@
+import type { BaseSQLiteDatabase } from 'drizzle-orm/sqlite-core';
+import type * as schema from '../db/schema.js';
+/**
+ * Driver-agnostic Drizzle handle used by every engine module.
+ *
+ * Both the Cloudflare D1 driver (`drizzle-orm/d1`, async) and the Node
+ * better-sqlite3 driver (`drizzle-orm/better-sqlite3`, sync) produce a
+ * `BaseSQLiteDatabase` over the shared schema. Drizzle query builders are
+ * thenable, so `await db.select()...` works against both. The engine never
+ * imports a concrete driver — adapters construct the handle and inject it.
+ *
+ * The one place the drivers genuinely diverge is interactive transactions:
+ * better-sqlite3 runs them synchronously; D1 has no interactive transactions
+ * and relies on `db.batch()`. Engine code that needs atomicity across rows must
+ * use a single statement (e.g. a `... SELECT COALESCE(MAX(seq),0)+1 ...`
+ * scalar-subquery insert guarded by a UNIQUE index) rather than a multi-step
+ * read-modify-write, so the same code is correct on both drivers.
+ */
+export type EngineDb = BaseSQLiteDatabase<'async', any, typeof schema>;
+//# sourceMappingURL=database.d.ts.map

package/dist/ports/database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.d.ts","sourceRoot":"","sources":["../../src/ports/database.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,KAAK,MAAM,MAAM,iBAAiB,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AASH,MAAM,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,MAAM,CAAC,CAAC"}

package/dist/ports/database.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=database.js.map

package/dist/ports/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/ports/database.ts"],"names":[],"mappings":""}

package/dist/ports/entitlements.d.ts

@@ -0,0 +1,25 @@
+import type { Workspace } from './auth.js';
+export type UsageMetric = 'messages' | 'agents' | 'file_bytes';
+export interface PlanLimits {
+    messages: number;
+    agents: number;
+    file_bytes: number;
+    /** Global requests-per-minute ceiling, fed into the rate limiter. */
+    rate_per_min: number;
+}
+/**
+ * Pluggable plan limits / usage — the billing seam.
+ *
+ * Self-host uses `StaticEntitlementsProvider`, seeded from today's hardcoded
+ * `PLAN_LIMITS` (free/pro/enterprise), defaulting single-tenant deployments to a
+ * generous/unlimited tier. The cloud product injects a provider that resolves
+ * quotas from its billing system (e.g. a Stripe subscription) per workspace and
+ * reports metered usage.
+ */
+export interface EntitlementsProvider {
+    /** Resolve the active plan limits for a workspace. */
+    getLimits(workspace: Workspace): Promise<PlanLimits>;
+    /** Current usage for a metric, compared against the limit before allowing an action. */
+    getUsage(workspaceId: string, metric: UsageMetric): Promise<number>;
+}
+//# sourceMappingURL=entitlements.d.ts.map

package/dist/ports/entitlements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.d.ts","sourceRoot":"","sources":["../../src/ports/entitlements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE/D,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAErD,wFAAwF;IACxF,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrE"}

package/dist/ports/entitlements.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=entitlements.js.map

package/dist/ports/entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.js","sourceRoot":"","sources":["../../src/ports/entitlements.ts"],"names":[],"mappings":""}

package/dist/ports/event-queue.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Outbound event queue port — replaces the Cloudflare `WEBHOOK_QUEUE` binding.
+ *
+ * After a mutation, routes enqueue a delivery message; the consumer fans it out
+ * to the workspace's registered webhook subscribers (`engine/eventDelivery.ts`).
+ * On Cloudflare this is a Queue producer + a separate consumer Worker. The Node
+ * adapter implements it as an in-process async worker that calls `deliverEvent`
+ * directly (best-effort, single process).
+ */
+export interface QueuedEvent {
+    type: string;
+    workspaceId: string;
+    data: Record<string, unknown>;
+}
+export interface EventQueue {
+    /** Enqueue an event for asynchronous webhook delivery. Returns once accepted. */
+    send(message: QueuedEvent): Promise<void>;
+}
+//# sourceMappingURL=event-queue.d.ts.map

package/dist/ports/event-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-queue.d.ts","sourceRoot":"","sources":["../../src/ports/event-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,UAAU;IACzB,iFAAiF;IACjF,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C"}

package/dist/ports/event-queue.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=event-queue.js.map

package/dist/ports/event-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-queue.js","sourceRoot":"","sources":["../../src/ports/event-queue.ts"],"names":[],"mappings":""}

package/dist/ports/files.d.ts

@@ -0,0 +1,28 @@
+/**
+ * File storage port — replaces the R2/S3 presigned-URL surface in `engine/file.ts`.
+ *
+ * The database rows (the `files` table: pending → complete → deleted lifecycle)
+ * are portable domain logic and stay in the engine. Only the blob backend is the
+ * port: Cloudflare signs R2 (S3-compatible) URLs; the Node adapter stores blobs
+ * on local disk and serves them through an engine-mounted download route using a
+ * short-lived signed token.
+ */
+export interface FileStorage {
+    /**
+     * Return a URL the client can `PUT` the file bytes to, valid ~1h.
+     * `storageKey` is the engine-assigned object key (`<workspaceId>/<id>/<name>`).
+     */
+    createUploadUrl(args: {
+        storageKey: string;
+        contentType: string;
+        sizeBytes: number;
+    }): Promise<{
+        uploadUrl: string;
+        expiresAt: string;
+    }>;
+    /** Return a URL the client can `GET` the file bytes from, valid ~1h. */
+    createDownloadUrl(args: {
+        storageKey: string;
+    }): Promise<string>;
+}
+//# sourceMappingURL=files.d.ts.map

package/dist/ports/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/ports/files.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEtD,wEAAwE;IACxE,iBAAiB,CAAC,IAAI,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClE"}

package/dist/ports/files.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=files.js.map

package/dist/ports/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/ports/files.ts"],"names":[],"mappings":""}