@relaycast/engine 1.1.7

package/dist/ports/index.d.ts

@@ -0,0 +1,84 @@
+/**
+ * The complete dependency contract for the Relaycast engine.
+ *
+ * Everything platform-specific is expressed here as an interface. An adapter
+ * (Node in-process for self-host; Cloudflare DO for the hosted product) provides
+ * concrete implementations, and `createEngine(deps)` wires them into the Hono app.
+ *
+ * Two groups:
+ *  - **Ports** — infrastructure the engine needs (db, realtime, presence, rate
+ *    limiting, MCP sessions, file blobs, key/value).
+ *  - **Providers** — the open-core "hosting" seam the cloud layer overrides
+ *    (auth, entitlements/billing, telemetry). Each ships an OSS default.
+ */
+export type { EngineDb } from './database.js';
+export type { EngineEvent, RealtimeBus, ConnectionRegistry, BroadcastToChannelArgs, UpgradeArgs, } from './realtime.js';
+export type { PresenceTracker } from './presence.js';
+export type { RateLimiter, RateLimitResult } from './rate-limit.js';
+export type { McpSessionHost } from './mcp.js';
+export type { FileStorage } from './files.js';
+export type { KeyValueStore } from './kv.js';
+export type { EventQueue, QueuedEvent } from './event-queue.js';
+export type { AuthProvider, AuthResult, AuthRequire, Workspace, Agent, } from './auth.js';
+export type { EntitlementsProvider, PlanLimits, UsageMetric, } from './entitlements.js';
+export type { TelemetrySink, TelemetryEvent } from './telemetry.js';
+import type { EngineDb } from './database.js';
+import type { RealtimeBus, ConnectionRegistry } from './realtime.js';
+import type { PresenceTracker } from './presence.js';
+import type { RateLimiter } from './rate-limit.js';
+import type { McpSessionHost } from './mcp.js';
+import type { FileStorage } from './files.js';
+import type { KeyValueStore } from './kv.js';
+import type { EventQueue } from './event-queue.js';
+import type { AuthProvider } from './auth.js';
+import type { EntitlementsProvider } from './entitlements.js';
+import type { TelemetrySink } from './telemetry.js';
+/** Infrastructure ports the engine reads off the request context. */
+export interface EnginePorts {
+    db: EngineDb;
+    realtime: RealtimeBus;
+    connections: ConnectionRegistry;
+    presence: PresenceTracker;
+    rateLimiter: RateLimiter;
+    mcp: McpSessionHost;
+    files: FileStorage;
+    kv: KeyValueStore;
+    webhookQueue: EventQueue;
+}
+/** The open-core hosting seam — each has an OSS default in `../auth`, etc. */
+export interface EngineProviders {
+    auth: AuthProvider;
+    entitlements: EntitlementsProvider;
+    telemetry: TelemetrySink;
+}
+/** Everything `createEngine` needs. */
+export interface EngineDeps extends EnginePorts, EngineProviders {
+    /**
+     * Optional runtime config (file storage bucket hints, environment label,
+     * feature flags). Adapters pass what they need; the engine treats it as opaque
+     * read-only metadata.
+     */
+    config?: EngineConfig;
+}
+export interface EngineConfig {
+    environment?: string;
+    appVersion?: string;
+    appSemver?: string;
+    sdkSemver?: string;
+    /**
+     * When set, the structured logger exports prod logs to a PostHog OTLP endpoint
+     * via plain fetch (no posthog-node dependency). Self-host leaves this unset and
+     * logs to the console only; cloud wires it from its secrets.
+     */
+    logExport?: {
+        posthogApiKey?: string;
+        posthogHost?: string;
+    };
+    /**
+     * Default for the workspace event stream (`rk_live_` WS). When false (the
+     * self-host default), the workspace-wide stream is disabled unless explicitly
+     * enabled per workspace via the KV override.
+     */
+    workspaceStreamEnabled?: boolean;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,YAAY,EACV,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EACV,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,GACN,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,QAAQ,EAAE,WAAW,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,GAAG,EAAE,cAAc,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,EAAE,EAAE,aAAa,CAAC;IAClB,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,oBAAoB,CAAC;IACnC,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAW,SAAQ,WAAW,EAAE,eAAe;IAC9D;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC"}

package/dist/ports/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/ports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":""}

package/dist/ports/kv.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Key/value store port — replaces the Cloudflare KV namespace.
+ *
+ * Used for idempotency records/locks (`middleware/idempotency.ts`) and plan-usage
+ * counters (`middleware/planLimits.ts`, `middleware/usageTracker.ts`). The surface
+ * is intentionally the small subset of `KVNamespace` the engine actually calls, so
+ * a Cloudflare `KVNamespace` is structurally assignable to it. The Node adapter
+ * implements it with an in-memory map (TTL via timestamps) or a SQLite table.
+ */
+export interface KeyValueStore {
+    get(key: string): Promise<string | null>;
+    put(key: string, value: string, options?: {
+        expirationTtl?: number;
+    }): Promise<void>;
+    delete(key: string): Promise<void>;
+    /**
+     * Atomically add `delta` to the integer value at `key` (treating a missing or
+     * non-numeric value as 0) and return the new total. Exists because usage
+     * counters were previously a racy get→parse→put read-modify-write that lost
+     * concurrent increments. Adapters must implement this without a lost-update
+     * window (the Cloudflare adapter routes it through a Durable Object).
+     */
+    increment(key: string, delta: number): Promise<number>;
+}
+//# sourceMappingURL=kv.d.ts.map

package/dist/ports/kv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv.d.ts","sourceRoot":"","sources":["../../src/ports/kv.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxD"}

package/dist/ports/kv.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=kv.js.map

package/dist/ports/kv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kv.js","sourceRoot":"","sources":["../../src/ports/kv.ts"],"names":[],"mappings":""}

package/dist/ports/mcp.d.ts

@@ -0,0 +1,18 @@
+/**
+ * MCP (Model Context Protocol) stateful-session host — replaces McpSessionDO.
+ *
+ * The session-id strategy is owned entirely by the adapter. Cloudflare derives
+ * it from `state.id.toString()` (hex) and routes back via `idFromString`; Node
+ * generates a `crypto.randomUUID()` and holds the transport in a `Map`. An
+ * unknown/evicted session id returns the same 404 on both, so the engine route
+ * only ever forwards the `mcp-session-id` header and never assumes its shape.
+ */
+export interface McpSessionHost {
+    /**
+     * Route an MCP Streamable-HTTP request to its stateful session, creating one
+     * when `sessionId` is undefined (the `initialize` call). Returns the full
+     * `Response` (including the assigned `mcp-session-id` header on creation).
+     */
+    handle(request: Request, sessionId: string | undefined): Promise<Response>;
+}
+//# sourceMappingURL=mcp.d.ts.map

package/dist/ports/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../src/ports/mcp.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC5E"}

package/dist/ports/mcp.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp.js.map

package/dist/ports/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/ports/mcp.ts"],"names":[],"mappings":""}

package/dist/ports/presence.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Presence tracking port — replaces PresenceDO.
+ *
+ * The 60s stale-sweep that emits `agent.offline` is *behavior*, not interface:
+ * it lives inside the adapter (Cloudflare uses DO alarms; Node uses
+ * `setInterval`) and emits via {@link RealtimeBus.deliverToAgents} +
+ * `publishToWorkspaceStream`. The adapter is constructed with a reference to the
+ * realtime bus so the sweep can fan out.
+ */
+export interface PresenceTracker {
+    /** Record a heartbeat; emits `agent.online` if the agent was previously offline. */
+    heartbeat(workspaceId: string, agentId: string, agentName?: string): Promise<void>;
+    /** Mark an agent offline now; emits `agent.offline`. */
+    disconnect(workspaceId: string, agentId: string, agentName?: string): Promise<void>;
+    /** Return the agent IDs currently considered online for a workspace. */
+    getOnline(workspaceId: string): Promise<string[]>;
+}
+//# sourceMappingURL=presence.d.ts.map

package/dist/ports/presence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence.d.ts","sourceRoot":"","sources":["../../src/ports/presence.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnF,wDAAwD;IACxD,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpF,wEAAwE;IACxE,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACnD"}

package/dist/ports/presence.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=presence.js.map

package/dist/ports/presence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presence.js","sourceRoot":"","sources":["../../src/ports/presence.ts"],"names":[],"mappings":""}

package/dist/ports/rate-limit.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Rate limiter port — replaces RateLimitDO `/check`.
+ *
+ * The per-route multiplier logic stays in the rate-limit middleware; only the
+ * bucket check is the port. Node uses an in-memory sliding window (today's
+ * middleware fallback, lifted out); Cloudflare routes to RateLimitDO.
+ */
+export interface RateLimitResult {
+    allowed: boolean;
+    count: number;
+    remaining: number;
+}
+export interface RateLimiter {
+    check(args: {
+        bucketKey: string;
+        limit: number;
+        windowMs: number;
+    }): Promise<RateLimitResult>;
+}
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/ports/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/ports/rate-limit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC/F"}

package/dist/ports/rate-limit.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rate-limit.js.map

package/dist/ports/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../src/ports/rate-limit.ts"],"names":[],"mappings":""}

package/dist/ports/realtime.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Realtime coordination ports.
+ *
+ * These replace the Cloudflare Durable Objects that today sequence and fan out
+ * events (ChannelDO, AgentDO, WorkspaceStreamDO). The engine expresses *intent*
+ * ("broadcast this event to a channel"); an adapter decides how that happens:
+ *
+ *  - Node in-process adapter (OSS self-host): in-memory per-key counters +
+ *    socket sets + a 500-event resync ring, all in one process.
+ *  - Cloudflare DO adapter (cloud, lives in the cloud repo): translates each
+ *    call back into `env.X_DO.idFromName(...).fetch(...)`.
+ *
+ * `RealtimeBus` and `ConnectionRegistry` are intentionally separate interfaces
+ * with different callers (routes drive the bus; the WS upgrade route drives the
+ * registry) even though a single in-process adapter implements both over shared
+ * state (an agent's seq counter and its socket set must live together).
+ */
+/** A client-facing event payload, already passed through `transformForClient`. */
+export type EngineEvent = Record<string, unknown>;
+export interface BroadcastToChannelArgs {
+    workspaceId: string;
+    channelId: string;
+    event: EngineEvent;
+    /** Member agent IDs — used by the adapter to (re)initialize its member cache. */
+    members?: string[];
+    /** Muted member agent IDs — message-type events are suppressed for these. */
+    mutedMembers?: string[];
+}
+export interface RealtimeBus {
+    /**
+     * Sequence and fan out an event to a channel's members.
+     * Replaces ChannelDO `/broadcast` and its per-member AgentDO `/deliver` loop.
+     *
+     * MUST assign `channelSeq` strictly increasing per `(workspaceId, channelId)`,
+     * even under concurrent callers.
+     */
+    broadcastToChannel(args: BroadcastToChannelArgs): Promise<{
+        channelSeq: number;
+    }>;
+    /**
+     * Deliver an event directly to specific agents (DMs, presence changes, action
+     * push). Replaces `fanoutToAgents` + AgentDO `/deliver`. Each agent gets its
+     * own monotonic `agentSeq` stamped (see {@link ConnectionRegistry.pushToAgent}).
+     */
+    deliverToAgents(args: {
+        workspaceId: string;
+        agentIds: string[];
+        event: EngineEvent;
+    }): Promise<void>;
+    /**
+     * Publish to the workspace-level stream consumed by workspace-key (`rk_live_`)
+     * subscribers. Replaces `publishToWorkspaceStream` + WorkspaceStreamDO `/deliver`.
+     */
+    publishToWorkspaceStream(args: {
+        workspaceId: string;
+        event: EngineEvent;
+    }): Promise<void>;
+    /** Update the cached member list for a channel. Replaces ChannelDO `/update-members`. */
+    setChannelMembers(workspaceId: string, channelId: string, members: string[]): Promise<void>;
+    /** Update the cached muted list for a channel. Replaces ChannelDO `/update-muted`. */
+    setChannelMuted(workspaceId: string, channelId: string, muted: string[]): Promise<void>;
+}
+export interface UpgradeArgs {
+    request: Request;
+    scope: 'agent' | 'workspace';
+    workspaceId: string;
+    /** Required when `scope === 'agent'`. */
+    agentId?: string;
+    /** Display name, used for presence events. */
+    agentName?: string;
+    origin: {
+        surface: string;
+        client: string;
+        version: string;
+    };
+    /** Cloud-only harness identifier; defaults to `'unknown'`. */
+    harness?: string;
+}
+export interface ConnectionRegistry {
+    /**
+     * Upgrade an incoming request to a WebSocket bound to an agent or a workspace
+     * stream. Returns the `Response` (status 101 + the socket). The adapter owns
+     * the transport: Cloudflare uses `WebSocketPair` + hibernation; Node uses the
+     * `ws` library and never evicts (single-process model).
+     *
+     * The resync protocol (`resync` / `resync_ack`, the 500-event ring, and the
+     * DB-fallback replay via {@link replayMissedEvents}) is a wire-level detail the
+     * client speaks to whichever side holds the socket, so it lives in the adapter.
+     */
+    upgrade(args: UpgradeArgs): Promise<Response>;
+    /**
+     * Push an event to one agent's live sockets, stamping a monotonic `agentSeq`
+     * and buffering it for resync. Called by {@link RealtimeBus.deliverToAgents}
+     * internally — the in-process adapter implements both ports over shared state.
+     *
+     * MUST assign `agentSeq` strictly increasing per `(workspaceId, agentId)`.
+     */
+    pushToAgent(workspaceId: string, agentId: string, event: EngineEvent): Promise<{
+        agentSeq: number;
+    }>;
+    /** Force-close all of an agent's sockets (e.g. on token rotation). Replaces AgentDO `/force-disconnect`. */
+    disconnectAgent(workspaceId: string, agentId: string): Promise<void>;
+}
+//# sourceMappingURL=realtime.d.ts.map

package/dist/ports/realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.d.ts","sourceRoot":"","sources":["../../src/ports/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,kFAAkF;AAClF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAElD,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC;IACnB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B;;;;;;OAMG;IACH,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAElF;;;;OAIG;IACH,eAAe,CAAC,IAAI,EAAE;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;QACnB,KAAK,EAAE,WAAW,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElB;;;OAGG;IACH,wBAAwB,CAAC,IAAI,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,WAAW,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElB,yFAAyF;IACzF,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5F,sFAAsF;IACtF,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,GAAG,WAAW,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;OASG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE9C;;;;;;OAMG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,WAAW,GACjB,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEjC,4GAA4G;IAC5G,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtE"}

package/dist/ports/realtime.js

@@ -0,0 +1,19 @@
+/**
+ * Realtime coordination ports.
+ *
+ * These replace the Cloudflare Durable Objects that today sequence and fan out
+ * events (ChannelDO, AgentDO, WorkspaceStreamDO). The engine expresses *intent*
+ * ("broadcast this event to a channel"); an adapter decides how that happens:
+ *
+ *  - Node in-process adapter (OSS self-host): in-memory per-key counters +
+ *    socket sets + a 500-event resync ring, all in one process.
+ *  - Cloudflare DO adapter (cloud, lives in the cloud repo): translates each
+ *    call back into `env.X_DO.idFromName(...).fetch(...)`.
+ *
+ * `RealtimeBus` and `ConnectionRegistry` are intentionally separate interfaces
+ * with different callers (routes drive the bus; the WS upgrade route drives the
+ * registry) even though a single in-process adapter implements both over shared
+ * state (an agent's seq counter and its socket set must live together).
+ */
+export {};
+//# sourceMappingURL=realtime.js.map

package/dist/ports/realtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realtime.js","sourceRoot":"","sources":["../../src/ports/realtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}

package/dist/ports/telemetry.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Pluggable telemetry sink — the observability seam.
+ *
+ * Self-host uses `NoopTelemetrySink` (honors `DO_NOT_TRACK` / explicit disable).
+ * The cloud product injects a PostHog-backed sink. All methods are
+ * fire-and-forget from the engine's perspective; the sink decides batching and
+ * background flushing.
+ */
+export interface TelemetryEvent {
+    /** Event name, e.g. `relaycast_server_message_posted`. */
+    name: string;
+    /** Stable per-workspace (or per-actor) id for aggregation. */
+    distinctId: string;
+    properties: Record<string, unknown>;
+}
+export interface TelemetrySink {
+    capture(event: TelemetryEvent): void;
+    captureException(err: unknown, context?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/ports/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/ports/telemetry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;IACrC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzE"}

package/dist/ports/telemetry.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=telemetry.js.map

package/dist/ports/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/ports/telemetry.ts"],"names":[],"mappings":""}

package/dist/providers/noop-telemetry.d.ts

@@ -0,0 +1,13 @@
+import type { TelemetrySink, TelemetryEvent } from '../ports/telemetry.js';
+/**
+ * No-op telemetry — the self-host default. Captures nothing; honors the intent
+ * of `DO_NOT_TRACK`. The cloud product injects a PostHog-backed sink.
+ *
+ * `captureException` still logs to the console so self-host operators see server
+ * errors without any external service.
+ */
+export declare class NoopTelemetrySink implements TelemetrySink {
+    capture(_event: TelemetryEvent): void;
+    captureException(err: unknown, context?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=noop-telemetry.d.ts.map

package/dist/providers/noop-telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop-telemetry.d.ts","sourceRoot":"","sources":["../../src/providers/noop-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3E;;;;;;GAMG;AACH,qBAAa,iBAAkB,YAAW,aAAa;IACrD,OAAO,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAIrC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;CAGxE"}

package/dist/providers/noop-telemetry.js

@@ -0,0 +1,16 @@
+/**
+ * No-op telemetry — the self-host default. Captures nothing; honors the intent
+ * of `DO_NOT_TRACK`. The cloud product injects a PostHog-backed sink.
+ *
+ * `captureException` still logs to the console so self-host operators see server
+ * errors without any external service.
+ */
+export class NoopTelemetrySink {
+    capture(_event) {
+        // intentionally empty
+    }
+    captureException(err, context) {
+        console.error('[telemetry] captureException', err, context ?? {});
+    }
+}
+//# sourceMappingURL=noop-telemetry.js.map

package/dist/providers/noop-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop-telemetry.js","sourceRoot":"","sources":["../../src/providers/noop-telemetry.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,OAAO,iBAAiB;IAC5B,OAAO,CAAC,MAAsB;QAC5B,sBAAsB;IACxB,CAAC;IAED,gBAAgB,CAAC,GAAY,EAAE,OAAiC;QAC9D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;CACF"}

package/dist/providers/static-entitlements.d.ts

@@ -0,0 +1,23 @@
+import type { EntitlementsProvider, PlanLimits, UsageMetric, Workspace } from '../ports/index.js';
+import type { KeyValueStore } from '../ports/kv.js';
+/**
+ * The default plan limits, lifted from the original `middleware/planLimits.ts`.
+ * Self-host deployments typically run the `selfhost` tier (everything
+ * unlimited); the free/pro/enterprise tiers are kept so the same code serves a
+ * tiered deployment if a workspace's `plan` column is set.
+ */
+export declare const PLAN_LIMITS: Record<string, PlanLimits>;
+/**
+ * Static, table-driven entitlements — the self-host default. Resolves limits
+ * from {@link PLAN_LIMITS} keyed by `workspace.plan`, and reads usage counters
+ * from the key/value store (the same `usage:<wid>:<metric>` keys the usage
+ * tracker increments). The cloud product injects a billing-backed provider.
+ */
+export declare class StaticEntitlementsProvider implements EntitlementsProvider {
+    private readonly kv?;
+    private readonly defaultPlan;
+    constructor(kv?: KeyValueStore | undefined, defaultPlan?: string);
+    getLimits(workspace: Workspace): Promise<PlanLimits>;
+    getUsage(workspaceId: string, metric: UsageMetric): Promise<number>;
+}
+//# sourceMappingURL=static-entitlements.d.ts.map

package/dist/providers/static-entitlements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-entitlements.d.ts","sourceRoot":"","sources":["../../src/providers/static-entitlements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAKlD,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,0BAA2B,YAAW,oBAAoB;IAEnE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,EAAE,CAAC,EAAE,aAAa,YAAA,EAClB,WAAW,GAAE,MAAmB;IAG7C,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAKpD,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;CAS1E"}

package/dist/providers/static-entitlements.js

@@ -0,0 +1,42 @@
+/**
+ * The default plan limits, lifted from the original `middleware/planLimits.ts`.
+ * Self-host deployments typically run the `selfhost` tier (everything
+ * unlimited); the free/pro/enterprise tiers are kept so the same code serves a
+ * tiered deployment if a workspace's `plan` column is set.
+ */
+export const PLAN_LIMITS = {
+    free: { messages: 10_000, agents: 5, file_bytes: 100 * 1024 * 1024, rate_per_min: 300 },
+    pro: { messages: 1_000_000, agents: 100, file_bytes: 50 * 1024 * 1024 * 1024, rate_per_min: 6000 },
+    enterprise: { messages: Infinity, agents: Infinity, file_bytes: 500 * 1024 * 1024 * 1024, rate_per_min: 30000 },
+    selfhost: { messages: Infinity, agents: Infinity, file_bytes: Infinity, rate_per_min: 30000 },
+};
+/**
+ * Static, table-driven entitlements — the self-host default. Resolves limits
+ * from {@link PLAN_LIMITS} keyed by `workspace.plan`, and reads usage counters
+ * from the key/value store (the same `usage:<wid>:<metric>` keys the usage
+ * tracker increments). The cloud product injects a billing-backed provider.
+ */
+export class StaticEntitlementsProvider {
+    kv;
+    defaultPlan;
+    constructor(kv, defaultPlan = 'selfhost') {
+        this.kv = kv;
+        this.defaultPlan = defaultPlan;
+    }
+    async getLimits(workspace) {
+        const plan = workspace.plan || this.defaultPlan;
+        return PLAN_LIMITS[plan] ?? PLAN_LIMITS[this.defaultPlan];
+    }
+    async getUsage(workspaceId, metric) {
+        if (!this.kv)
+            return 0;
+        try {
+            const raw = await this.kv.get(`usage:${workspaceId}:${metric}`);
+            return parseInt(raw || '0', 10) || 0;
+        }
+        catch {
+            return 0;
+        }
+    }
+}
+//# sourceMappingURL=static-entitlements.js.map

package/dist/providers/static-entitlements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-entitlements.js","sourceRoot":"","sources":["../../src/providers/static-entitlements.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAA+B;IACrD,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE;IACvF,GAAG,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE;IAClG,UAAU,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE;IAC/G,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE;CAC9F,CAAC;AAEF;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IAElB;IACA;IAFnB,YACmB,EAAkB,EAClB,cAAsB,UAAU;QADhC,OAAE,GAAF,EAAE,CAAgB;QAClB,gBAAW,GAAX,WAAW,CAAqB;IAChD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,SAAoB;QAClC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC;QAChD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,MAAmB;QACrD,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,WAAW,IAAI,MAAM,EAAE,CAAC,CAAC;YAChE,OAAO,QAAQ,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;CACF"}

package/dist/routes/a2a.d.ts

@@ -0,0 +1,4 @@
+import { Hono } from 'hono';
+import type { AppEnv } from '../env.js';
+export declare const a2aRoutes: Hono<AppEnv, import("hono/types").BlankSchema, "/">;
+//# sourceMappingURL=a2a.d.ts.map

package/dist/routes/a2a.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.d.ts","sourceRoot":"","sources":["../../src/routes/a2a.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAOxC,eAAO,MAAM,SAAS,qDAAqB,CAAC"}