@relaycast/engine 4.2.0 → 5.0.1

package/dist/auth/tokenKind.js

@@ -0,0 +1,89 @@
+import { z } from 'zod';
+const tokenKindConfig = {
+    workspace: {
+        prefix: 'rk_live_',
+        requiredMessage: 'Workspace key required (rk_live_...)',
+    },
+    agent: {
+        prefix: 'at_live_',
+        requiredMessage: 'Agent token required (at_live_...)',
+    },
+    node: {
+        prefix: 'nt_live_',
+        requiredMessage: 'Node token required (nt_live_...)',
+    },
+    observer: {
+        prefix: 'ot_live_',
+        requiredMessage: 'Observer token required (ot_live_...)',
+    },
+};
+const workspaceTokenSchema = z
+    .string()
+    .startsWith(tokenKindConfig.workspace.prefix)
+    .transform((token) => ({ kind: 'workspace', token }));
+const agentTokenSchema = z
+    .string()
+    .startsWith(tokenKindConfig.agent.prefix)
+    .transform((token) => ({ kind: 'agent', token }));
+const nodeTokenSchema = z
+    .string()
+    .startsWith(tokenKindConfig.node.prefix)
+    .transform((token) => ({ kind: 'node', token }));
+const observerTokenSchema = z
+    .string()
+    .startsWith(tokenKindConfig.observer.prefix)
+    .transform((token) => ({ kind: 'observer', token }));
+export const authTokenSchema = z.union([
+    workspaceTokenSchema,
+    agentTokenSchema,
+    nodeTokenSchema,
+    observerTokenSchema,
+]);
+export function parseAuthToken(token) {
+    const parsed = authTokenSchema.safeParse(token);
+    return parsed.success ? parsed.data : undefined;
+}
+export function getAuthTokenKind(token) {
+    return parseAuthToken(token)?.kind;
+}
+export function requiredTokenMessage(kind) {
+    return tokenKindConfig[kind].requiredMessage;
+}
+const allowedKindsByRequire = {
+    workspace: ['workspace'],
+    agent: ['agent'],
+    node: ['node'],
+    observer: ['observer'],
+    // `any` intentionally means user/workspace API credentials, not transport-only
+    // node credentials or scoped observer credentials.
+    any: ['workspace', 'agent'],
+};
+export function validateTokenRequirement(tokenKind, require) {
+    const allowedKinds = allowedKindsByRequire[require];
+    if (allowedKinds.includes(tokenKind)) {
+        return { ok: true };
+    }
+    if (tokenKind === 'node') {
+        return {
+            ok: false,
+            code: 'node_token_forbidden',
+            message: 'Node token cannot perform this operation',
+        };
+    }
+    if (tokenKind === 'observer') {
+        return {
+            ok: false,
+            code: 'observer_token_forbidden',
+            message: 'Observer token cannot perform this operation',
+        };
+    }
+    if (require === 'any') {
+        return { ok: false, code: 'unauthorized', message: 'Invalid token format' };
+    }
+    return {
+        ok: false,
+        code: 'unauthorized',
+        message: requiredTokenMessage(require),
+    };
+}
+//# sourceMappingURL=tokenKind.js.map

package/dist/auth/tokenKind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenKind.js","sourceRoot":"","sources":["../../src/auth/tokenKind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,eAAe,GAAG;IACtB,SAAS,EAAE;QACT,MAAM,EAAE,UAAU;QAClB,eAAe,EAAE,sCAAsC;KACxD;IACD,KAAK,EAAE;QACL,MAAM,EAAE,UAAU;QAClB,eAAe,EAAE,oCAAoC;KACtD;IACD,IAAI,EAAE;QACJ,MAAM,EAAE,UAAU;QAClB,eAAe,EAAE,mCAAmC;KACrD;IACD,QAAQ,EAAE;QACR,MAAM,EAAE,UAAU;QAClB,eAAe,EAAE,uCAAuC;KACzD;CACO,CAAC;AASX,MAAM,oBAAoB,GAAG,CAAC;KAC3B,MAAM,EAAE;KACR,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC;KAC5C,SAAS,CAAC,CAAC,KAAK,EAA+B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAErF,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;KACxC,SAAS,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAE7E,MAAM,eAAe,GAAG,CAAC;KACtB,MAAM,EAAE;KACR,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC;KACvC,SAAS,CAAC,CAAC,KAAK,EAA0B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAE3E,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC3C,SAAS,CAAC,CAAC,KAAK,EAA8B,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAEnF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,oBAAoB;IACpB,gBAAgB;IAChB,eAAe;IACf,mBAAmB;CACpB,CAAC,CAAC;AAIH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAiC;IACpE,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC;AAC/C,CAAC;AAED,MAAM,qBAAqB,GAAG;IAC5B,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,KAAK,EAAE,CAAC,OAAO,CAAC;IAChB,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,+EAA+E;IAC/E,mDAAmD;IACnD,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;CACqC,CAAC;AAMnE,MAAM,UAAU,wBAAwB,CACtC,SAAwB,EACxB,OAAoB;IAEpB,MAAM,YAAY,GAA6B,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9E,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,0CAA0C;SACpD,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE,8CAA8C;SACxD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC9E,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC;KACvC,CAAC;AACJ,CAAC"}

package/dist/bin/serve.js

@@ -50,9 +50,8 @@ async function main() {
         return;
     }
     const baseUrl = opts.baseUrl ?? `http://localhost:${opts.port}`;
-    // Optional self-host tuning via env: the fleet rollout default and the bounded
-    // mailbox TTL / depth cap. Lets operators (and the fleet E2E) configure a short
-    // TTL / small depth cap without code changes.
+    // Optional self-host tuning via env: bounded mailbox TTL / depth cap. Lets
+    // operators configure a short TTL / small depth cap without code changes.
     const num = (v) => {
         if (v == null || v.trim() === '')
             return undefined;
@@ -69,7 +68,6 @@ async function main() {
         baseUrl,
         config: {
             environment: opts.environment,
-            ...(process.env.RELAYCAST_FLEET_NODES_ENABLED === '1' ? { fleetNodesEnabled: true } : {}),
             ...(Object.keys(mailbox).length > 0 ? { mailbox } : {}),
         },
     });

package/dist/bin/serve.js.map

@@ -1 +1 @@
-{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/bin/serve.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;CAcZ,CAAC;AAUF,SAAS,SAAS,CAAC,IAAc,EAAE,GAAsB;IACvD,MAAM,GAAG,GAAc;QACrB,EAAE,EAAE,GAAG,CAAC,iBAAiB,IAAI,gBAAgB;QAC7C,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACxC,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,GAAG,CAAC,aAAa,IAAI,YAAY;QAC9C,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;aACjD,IAAI,GAAG,KAAK,MAAM;YAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;aACjD,IAAI,GAAG,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;aAC/D,IAAI,GAAG,KAAK,YAAY;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAClD,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;IAChE,+EAA+E;IAC/E,gFAAgF;IAChF,8CAA8C;IAC9C,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAsB,EAAE;QACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClI,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO;QACP,MAAM,EAAE;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,SAAS,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,OAAO,8EAA8E,CAC5H,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC3C,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../src/bin/serve.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,IAAI,GAAG;;;;;;;;;;;;;;CAcZ,CAAC;AAUF,SAAS,SAAS,CAAC,IAAc,EAAE,GAAsB;IACvD,MAAM,GAAG,GAAc;QACrB,EAAE,EAAE,GAAG,CAAC,iBAAiB,IAAI,gBAAgB;QAC7C,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QACxC,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,GAAG,CAAC,aAAa,IAAI,YAAY;QAC9C,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;aACjD,IAAI,GAAG,KAAK,MAAM;YAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;aACjD,IAAI,GAAG,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;aAC/D,IAAI,GAAG,KAAK,YAAY;YAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAClD,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;IAChE,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAsB,EAAE;QACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC,CAAC;IACF,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClI,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO;QACP,MAAM,EAAE;YACN,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,OAAO,SAAS,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,OAAO,8EAA8E,CAC5H,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC3C,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/db/migrations/0021_node_delivery_contracts.sql

@@ -0,0 +1,70 @@
+-- Nodes as routeable delivery hosts, with explicit delivery contracts.
+
+ALTER TABLE nodes ADD COLUMN kind TEXT NOT NULL DEFAULT 'fleet_ws';
+ALTER TABLE nodes ADD COLUMN delivery_adapter TEXT NOT NULL DEFAULT 'fleet.ws.v1';
+ALTER TABLE nodes ADD COLUMN delivery_config TEXT DEFAULT NULL;
+
+CREATE TABLE IF NOT EXISTS agent_node_bindings (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  node_id TEXT NOT NULL REFERENCES nodes(id) ON DELETE CASCADE,
+  status TEXT NOT NULL DEFAULT 'active',
+  session_ref TEXT,
+  priority INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER,
+  UNIQUE(agent_id, node_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_agent_node_bindings_workspace
+  ON agent_node_bindings(workspace_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_agent_node_bindings_agent
+  ON agent_node_bindings(workspace_id, agent_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_agent_node_bindings_node
+  ON agent_node_bindings(workspace_id, node_id, status);
+
+-- Backfill explicit bindings for existing fleet-hosted agents.
+INSERT OR IGNORE INTO agent_node_bindings (
+  id,
+  workspace_id,
+  agent_id,
+  node_id,
+  status,
+  session_ref,
+  priority,
+  created_at
+)
+SELECT
+  'anb_' || id,
+  workspace_id,
+  id,
+  location_node_id,
+  'active',
+  session_ref,
+  0,
+  unixepoch()
+FROM agents
+WHERE location_type = 'via_node'
+  AND location_node_id IS NOT NULL;
+
+ALTER TABLE deliveries ADD COLUMN route_node_id TEXT DEFAULT NULL REFERENCES nodes(id) ON DELETE SET NULL;
+ALTER TABLE deliveries ADD COLUMN route_node_kind TEXT DEFAULT NULL;
+ALTER TABLE deliveries ADD COLUMN delivery_adapter TEXT DEFAULT NULL;
+ALTER TABLE deliveries ADD COLUMN dispatch_attempts INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE deliveries ADD COLUMN next_attempt_at INTEGER DEFAULT NULL;
+ALTER TABLE deliveries ADD COLUMN last_dispatch_error TEXT DEFAULT NULL;
+
+UPDATE deliveries
+SET
+  route_node_id = location_node_id,
+  route_node_kind = CASE WHEN location_node_id IS NOT NULL THEN 'fleet_ws' ELSE NULL END,
+  delivery_adapter = CASE WHEN location_node_id IS NOT NULL THEN 'fleet.ws.v1' ELSE NULL END;
+
+CREATE INDEX IF NOT EXISTS idx_deliveries_route_node
+  ON deliveries(workspace_id, route_node_id, status, seq);
+
+CREATE INDEX IF NOT EXISTS idx_deliveries_next_attempt
+  ON deliveries(workspace_id, status, next_attempt_at);

package/dist/db/migrations/0022_http_push_redrive.sql

@@ -0,0 +1,13 @@
+-- Keep due HTTP push retries cheap and reconcile binding-backed capacity counts.
+
+CREATE INDEX IF NOT EXISTS idx_deliveries_http_push_due
+  ON deliveries(workspace_id, route_node_kind, status, next_attempt_at);
+
+UPDATE nodes
+SET active_agents = (
+  SELECT COUNT(*)
+  FROM agent_node_bindings b
+  WHERE b.workspace_id = nodes.workspace_id
+    AND b.node_id = nodes.id
+    AND b.status = 'active'
+);

package/dist/db/migrations/0023_direct_ws_nodes.sql

@@ -0,0 +1,124 @@
+-- Every agent has exactly one node route. Backfill legacy self-connected agents
+-- as implicit direct_ws nodes-of-one.
+
+INSERT OR IGNORE INTO nodes (
+  id,
+  workspace_id,
+  name,
+  token_hash,
+  kind,
+  delivery_adapter,
+  delivery_config,
+  capabilities,
+  max_agents,
+  active_agents,
+  reserved_agents,
+  tags,
+  version,
+  status,
+  handlers_live,
+  load,
+  last_heartbeat_at,
+  created_at
+)
+SELECT
+  'node_direct_' || a.id,
+  a.workspace_id,
+  'direct-' || a.id,
+  'implicit_direct:' || a.workspace_id || ':' || a.id,
+  'direct_ws',
+  'direct.ws.v1',
+  json_object('implicit', 1, 'agent_id', a.id, 'agent_name', a.name),
+  json_array(),
+  1,
+  1,
+  0,
+  json_array('implicit', 'direct_ws'),
+  'implicit',
+  CASE WHEN a.status IN ('active', 'online') THEN 'online' ELSE 'offline' END,
+  0,
+  0,
+  CASE WHEN a.status IN ('active', 'online') THEN unixepoch() ELSE NULL END,
+  unixepoch()
+FROM agents a
+WHERE NOT EXISTS (
+  SELECT 1
+  FROM agent_node_bindings b
+  WHERE b.workspace_id = a.workspace_id
+    AND b.agent_id = a.id
+    AND b.status = 'active'
+);
+
+INSERT OR IGNORE INTO agent_node_bindings (
+  id,
+  workspace_id,
+  agent_id,
+  node_id,
+  status,
+  session_ref,
+  priority,
+  created_at,
+  updated_at
+)
+SELECT
+  'anb_direct_' || a.id,
+  a.workspace_id,
+  a.id,
+  'node_direct_' || a.id,
+  'active',
+  a.session_ref,
+  0,
+  unixepoch(),
+  unixepoch()
+FROM agents a
+WHERE EXISTS (
+  SELECT 1
+  FROM nodes n
+  WHERE n.workspace_id = a.workspace_id
+    AND n.id = 'node_direct_' || a.id
+    AND n.kind = 'direct_ws'
+)
+  AND NOT EXISTS (
+    SELECT 1
+    FROM agent_node_bindings b
+    WHERE b.workspace_id = a.workspace_id
+      AND b.agent_id = a.id
+      AND b.status = 'active'
+  );
+
+UPDATE agents
+SET
+  location_type = 'via_node',
+  location_node_id = 'node_direct_' || id,
+  origin_node_id = COALESCE(origin_node_id, 'node_direct_' || id)
+WHERE EXISTS (
+  SELECT 1
+  FROM agent_node_bindings b
+  WHERE b.workspace_id = agents.workspace_id
+    AND b.agent_id = agents.id
+    AND b.node_id = 'node_direct_' || agents.id
+    AND b.status = 'active'
+);
+
+UPDATE deliveries
+SET
+  route_node_id = 'node_direct_' || agent_id,
+  route_node_kind = 'direct_ws',
+  delivery_adapter = 'direct.ws.v1'
+WHERE route_node_id IS NULL
+  AND EXISTS (
+    SELECT 1
+    FROM agents a
+    WHERE a.workspace_id = deliveries.workspace_id
+      AND a.id = deliveries.agent_id
+      AND a.location_node_id = 'node_direct_' || a.id
+  );
+
+UPDATE nodes
+SET active_agents = (
+  SELECT COUNT(*)
+  FROM agent_node_bindings b
+  WHERE b.workspace_id = nodes.workspace_id
+    AND b.node_id = nodes.id
+    AND b.status = 'active'
+);

package/dist/db/migrations/0024_binding_workspace_constraints.sql

@@ -0,0 +1,109 @@
+-- Additive follow-up for environments that already ran 0021 before
+-- workspace-consistent binding constraints were introduced.
+
+CREATE UNIQUE INDEX IF NOT EXISTS agents_workspace_id_unique
+  ON agents(workspace_id, id);
+
+CREATE UNIQUE INDEX IF NOT EXISTS nodes_workspace_id_unique
+  ON nodes(workspace_id, id);
+
+CREATE TABLE IF NOT EXISTS agent_node_bindings_constrained (
+  id TEXT PRIMARY KEY,
+  workspace_id TEXT NOT NULL REFERENCES workspaces(id) ON DELETE CASCADE,
+  agent_id TEXT NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  node_id TEXT NOT NULL REFERENCES nodes(id) ON DELETE CASCADE,
+  status TEXT NOT NULL DEFAULT 'active',
+  session_ref TEXT,
+  priority INTEGER NOT NULL DEFAULT 0,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER,
+  FOREIGN KEY(workspace_id, agent_id) REFERENCES agents(workspace_id, id) ON DELETE CASCADE,
+  FOREIGN KEY(workspace_id, node_id) REFERENCES nodes(workspace_id, id) ON DELETE CASCADE,
+  UNIQUE(agent_id, node_id)
+);
+
+INSERT OR IGNORE INTO agent_node_bindings_constrained (
+  id,
+  workspace_id,
+  agent_id,
+  node_id,
+  status,
+  session_ref,
+  priority,
+  created_at,
+  updated_at
+)
+SELECT
+  b.id,
+  b.workspace_id,
+  b.agent_id,
+  b.node_id,
+  b.status,
+  b.session_ref,
+  b.priority,
+  b.created_at,
+  b.updated_at
+FROM agent_node_bindings b
+INNER JOIN agents a
+  ON a.workspace_id = b.workspace_id
+ AND a.id = b.agent_id
+INNER JOIN nodes n
+  ON n.workspace_id = b.workspace_id
+ AND n.id = b.node_id;
+
+DROP TABLE agent_node_bindings;
+
+ALTER TABLE agent_node_bindings_constrained RENAME TO agent_node_bindings;
+
+CREATE INDEX IF NOT EXISTS idx_agent_node_bindings_workspace
+  ON agent_node_bindings(workspace_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_agent_node_bindings_agent
+  ON agent_node_bindings(workspace_id, agent_id, status);
+
+CREATE INDEX IF NOT EXISTS idx_agent_node_bindings_node
+  ON agent_node_bindings(workspace_id, node_id, status);
+
+CREATE TRIGGER IF NOT EXISTS agent_node_bindings_workspace_agent_insert
+BEFORE INSERT ON agent_node_bindings
+WHEN NOT EXISTS (
+  SELECT 1 FROM agents a
+  WHERE a.workspace_id = NEW.workspace_id
+    AND a.id = NEW.agent_id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'agent_node_bindings workspace/agent mismatch');
+END;
+
+CREATE TRIGGER IF NOT EXISTS agent_node_bindings_workspace_node_insert
+BEFORE INSERT ON agent_node_bindings
+WHEN NOT EXISTS (
+  SELECT 1 FROM nodes n
+  WHERE n.workspace_id = NEW.workspace_id
+    AND n.id = NEW.node_id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'agent_node_bindings workspace/node mismatch');
+END;
+
+CREATE TRIGGER IF NOT EXISTS agent_node_bindings_workspace_agent_update
+BEFORE UPDATE OF workspace_id, agent_id ON agent_node_bindings
+WHEN NOT EXISTS (
+  SELECT 1 FROM agents a
+  WHERE a.workspace_id = NEW.workspace_id
+    AND a.id = NEW.agent_id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'agent_node_bindings workspace/agent mismatch');
+END;
+
+CREATE TRIGGER IF NOT EXISTS agent_node_bindings_workspace_node_update
+BEFORE UPDATE OF workspace_id, node_id ON agent_node_bindings
+WHEN NOT EXISTS (
+  SELECT 1 FROM nodes n
+  WHERE n.workspace_id = NEW.workspace_id
+    AND n.id = NEW.node_id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'agent_node_bindings workspace/node mismatch');
+END;

package/dist/db/migrations/0025_node_kind_role_adapter.sql

@@ -0,0 +1,45 @@
+-- Split node kind (transport) from node role (ownership/capability) and
+-- collapse WebSocket delivery onto one node envelope.
+
+ALTER TABLE nodes ADD COLUMN role TEXT NOT NULL DEFAULT 'broker';
+ALTER TABLE deliveries ADD COLUMN route_node_role TEXT DEFAULT NULL;
+
+UPDATE nodes
+SET
+  role = CASE
+    WHEN kind = 'direct_ws' THEN 'direct'
+    WHEN kind = 'fleet_ws' THEN 'broker'
+    WHEN kind = 'http_push' AND max_agents = 1 THEN 'direct'
+    WHEN kind = 'http_push' THEN 'broker'
+    ELSE role
+  END,
+  kind = CASE
+    WHEN kind IN ('direct_ws', 'fleet_ws') THEN 'ws'
+    ELSE kind
+  END,
+  delivery_adapter = CASE
+    WHEN delivery_adapter IN ('direct.ws.v1', 'fleet.ws.v1') THEN 'ws.node.v1'
+    ELSE delivery_adapter
+  END;
+
+UPDATE deliveries
+SET
+  route_node_role = CASE
+    WHEN route_node_kind = 'direct_ws' THEN 'direct'
+    WHEN route_node_kind = 'fleet_ws' THEN 'broker'
+    WHEN route_node_id IS NOT NULL THEN (
+      SELECT n.role
+      FROM nodes n
+      WHERE n.workspace_id = deliveries.workspace_id
+        AND n.id = deliveries.route_node_id
+    )
+    ELSE NULL
+  END,
+  route_node_kind = CASE
+    WHEN route_node_kind IN ('direct_ws', 'fleet_ws') THEN 'ws'
+    ELSE route_node_kind
+  END,
+  delivery_adapter = CASE
+    WHEN delivery_adapter IN ('direct.ws.v1', 'fleet.ws.v1') THEN 'ws.node.v1'
+    ELSE delivery_adapter
+  END;

package/dist/db/migrations/0026_observer_tokens.sql

@@ -0,0 +1,32 @@
+-- Add scoped observer tokens for workspace realtime and read-only REST.
+
+CREATE TABLE observer_tokens (
+  id TEXT PRIMARY KEY NOT NULL,
+  workspace_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT,
+  token_hash TEXT NOT NULL,
+  scopes TEXT NOT NULL DEFAULT '[]',
+  filters TEXT NOT NULL DEFAULT '{}',
+  status TEXT NOT NULL DEFAULT 'active',
+  expires_at INTEGER,
+  created_by TEXT,
+  created_by_type TEXT NOT NULL DEFAULT 'workspace',
+  last_used_at INTEGER,
+  created_at INTEGER NOT NULL DEFAULT (unixepoch()),
+  updated_at INTEGER,
+  revoked_at INTEGER,
+  FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+);
+
+CREATE UNIQUE INDEX observer_tokens_workspace_name_unique
+  ON observer_tokens (workspace_id, name);
+
+CREATE UNIQUE INDEX observer_tokens_token_hash_unique
+  ON observer_tokens (token_hash);
+
+CREATE INDEX idx_observer_tokens_workspace_status
+  ON observer_tokens (workspace_id, status);
+
+CREATE INDEX idx_observer_tokens_expires_at
+  ON observer_tokens (expires_at);