@roj-ai/sdk 0.0.2

package/src/transport/http/routes/upload.ts

@@ -0,0 +1,286 @@
+/**
+ * Upload Routes
+ *
+ * Multipart file upload endpoint for session attachments.
+ * Separate from RPC as multipart is more efficient for binary data.
+ * Business logic delegated to uploads plugin.
+ */
+
+import { Hono } from 'hono'
+import { SessionId } from '~/core/sessions/schema.js'
+import { type AppContext, type AppEnv, getServices } from '../app.js'
+
+// ============================================================================
+// Routes
+// ============================================================================
+
+/**
+ * Creates upload routes.
+ */
+export function createUploadRoutes(): Hono<AppEnv> {
+	const app = new Hono<AppEnv>()
+
+	/**
+	 * POST /sessions/:sessionId/upload
+	 *
+	 * Upload a file for later attachment to a message.
+	 * The file is processed and stored, but no message is sent.
+	 * Pending uploads are automatically dequeued by the uploads plugin during agent inference.
+	 *
+	 * Form fields:
+	 * - file (required): The file to upload
+	 *
+	 * Response:
+	 * - 201: { uploadId, status, extractedContent? }
+	 * - 400: Validation error
+	 * - 404: Session not found
+	 */
+	app.post('/:sessionId/upload', async (c: AppContext) => {
+		const { sessionRuntime, logger } = getServices(c)
+		const sessionId = SessionId(c.req.param('sessionId')!)
+
+		// 1. Verify session exists
+		const sessionResult = await sessionRuntime.getSession(sessionId)
+		if (!sessionResult.ok) {
+			return c.json(
+				{ error: { type: 'session_not_found', message: `Session not found: ${sessionId}` } },
+				404,
+			)
+		}
+
+		// 2. Parse multipart form data (transport concern — stays in HTTP layer)
+		let body: Record<string, string | File>
+		try {
+			body = await c.req.parseBody()
+		} catch {
+			return c.json(
+				{ error: { type: 'parse_error', message: 'Failed to parse multipart form data' } },
+				400,
+			)
+		}
+
+		const file = body.file
+
+		// 3. Validate file presence
+		if (!file || !(file instanceof File)) {
+			return c.json(
+				{ error: { type: 'validation_error', message: 'No file provided' } },
+				400,
+			)
+		}
+
+		// 4. Convert to Buffer and delegate to uploads plugin
+		const fileBuffer = Buffer.from(await file.arrayBuffer())
+
+		const result = await sessionRuntime.callPluginMethod(sessionId, 'uploads.upload', {
+			sessionId: String(sessionId),
+			filename: file.name,
+			mimeType: file.type,
+			size: file.size,
+			fileBuffer,
+		})
+
+		if (!result.ok) {
+			return c.json(
+				{ error: { type: result.error.type, message: result.error.type === 'validation_error' ? result.error.message : 'Upload failed' } },
+				400,
+			)
+		}
+
+		const uploadResult = result.value
+		if (typeof uploadResult !== 'object' || uploadResult === null || !('uploadId' in uploadResult)) {
+			return c.json(
+				{ error: { type: 'internal_error', message: 'Plugin did not return expected result' } },
+				500,
+			)
+		}
+
+		logger.info('File uploaded successfully', {
+			sessionId,
+			uploadId: uploadResult.uploadId,
+			filename: file.name,
+			mimeType: file.type,
+			size: file.size,
+		})
+
+		return c.json(
+			{
+				uploadId: uploadResult.uploadId,
+				status: 'status' in uploadResult ? uploadResult.status : 'ready',
+				extractedContent: 'extractedContent' in uploadResult ? uploadResult.extractedContent : undefined,
+			},
+			201,
+		)
+	})
+
+	/**
+	 * POST /sessions/:sessionId/upload-from-url
+	 *
+	 * Download a file from a URL and process it as an upload.
+	 * Used by the worker to inject resource files into sessions.
+	 *
+	 * JSON body:
+	 * - url (required): URL to download the file from
+	 * - filename (required): Original filename
+	 * - mimeType (required): MIME type of the file
+	 */
+	app.post('/:sessionId/upload-from-url', async (c: AppContext) => {
+		const { sessionRuntime, logger } = getServices(c)
+		const sessionId = SessionId(c.req.param('sessionId')!)
+
+		// 1. Verify session exists
+		const sessionResult = await sessionRuntime.getSession(sessionId)
+		if (!sessionResult.ok) {
+			return c.json(
+				{ error: { type: 'session_not_found', message: `Session not found: ${sessionId}` } },
+				404,
+			)
+		}
+
+		// 2. Parse JSON body
+		let body: { url: string; filename: string; mimeType: string }
+		try {
+			body = await c.req.json()
+		} catch {
+			return c.json(
+				{ error: { type: 'parse_error', message: 'Failed to parse JSON body' } },
+				400,
+			)
+		}
+
+		if (!body.url || !body.filename || !body.mimeType) {
+			return c.json(
+				{ error: { type: 'validation_error', message: 'Missing required fields: url, filename, mimeType' } },
+				400,
+			)
+		}
+
+		// 3. Fetch URL
+		let response: Response
+		try {
+			response = await fetch(body.url, { signal: AbortSignal.timeout(30_000) })
+		} catch (err) {
+			return c.json(
+				{ error: { type: 'fetch_error', message: `Failed to fetch URL: ${err instanceof Error ? err.message : String(err)}` } },
+				400,
+			)
+		}
+
+		if (!response.ok) {
+			return c.json(
+				{ error: { type: 'fetch_error', message: `URL returned ${response.status}` } },
+				400,
+			)
+		}
+
+		// 4. Read response with size limit (10MB)
+		const maxSize = 10 * 1024 * 1024
+		const contentLength = response.headers.get('Content-Length')
+		if (contentLength && Number.parseInt(contentLength, 10) > maxSize) {
+			return c.json(
+				{ error: { type: 'validation_error', message: 'File too large (max 10MB)' } },
+				400,
+			)
+		}
+
+		const arrayBuffer = await response.arrayBuffer()
+		if (arrayBuffer.byteLength > maxSize) {
+			return c.json(
+				{ error: { type: 'validation_error', message: 'File too large (max 10MB)' } },
+				400,
+			)
+		}
+
+		const fileBuffer = Buffer.from(arrayBuffer)
+
+		// 5. Call uploads plugin (same path as multipart upload)
+		const result = await sessionRuntime.callPluginMethod(sessionId, 'uploads.upload', {
+			sessionId: String(sessionId),
+			filename: body.filename,
+			mimeType: body.mimeType,
+			size: fileBuffer.length,
+			fileBuffer,
+		})
+
+		if (!result.ok) {
+			return c.json(
+				{ error: { type: result.error.type, message: result.error.type === 'validation_error' ? result.error.message : 'Upload failed' } },
+				400,
+			)
+		}
+
+		const uploadResult = result.value
+		if (typeof uploadResult !== 'object' || uploadResult === null || !('uploadId' in uploadResult)) {
+			return c.json(
+				{ error: { type: 'internal_error', message: 'Plugin did not return expected result' } },
+				500,
+			)
+		}
+
+		logger.info('File uploaded from URL successfully', {
+			sessionId,
+			uploadId: uploadResult.uploadId,
+			filename: body.filename,
+			mimeType: body.mimeType,
+			size: fileBuffer.length,
+		})
+
+		return c.json(
+			{
+				uploadId: uploadResult.uploadId,
+				status: 'status' in uploadResult ? uploadResult.status : 'ready',
+				extractedContent: 'extractedContent' in uploadResult ? uploadResult.extractedContent : undefined,
+			},
+			201,
+		)
+	})
+
+	/**
+	 * GET /sessions/:sessionId/uploads/:uploadId/:filename
+	 *
+	 * Download an uploaded file.
+	 * This stays in the HTTP layer as it returns binary data (not a plugin method concern).
+	 */
+	app.get('/:sessionId/uploads/:uploadId/:filename', async (c: AppContext) => {
+		const { dataFileStore } = getServices(c)
+		const sessionId = c.req.param('sessionId')!
+		const uploadId = c.req.param('uploadId')!
+		const filename = c.req.param('filename')!
+
+		const uploadStore = dataFileStore.scoped(`sessions/${sessionId}/uploads/${uploadId}`)
+		const readResult = await uploadStore.read(filename, { type: 'buffer' })
+
+		if (!readResult.ok) {
+			return c.json(
+				{ error: { type: 'not_found', message: 'File not found' } },
+				404,
+			)
+		}
+
+		// Detect MIME type
+		const ext = filename.split('.').pop()?.toLowerCase()
+		const mimeTypes: Record<string, string> = {
+			jpg: 'image/jpeg',
+			jpeg: 'image/jpeg',
+			png: 'image/png',
+			gif: 'image/gif',
+			webp: 'image/webp',
+			svg: 'image/svg+xml',
+			pdf: 'application/pdf',
+			txt: 'text/plain',
+			md: 'text/markdown',
+			json: 'application/json',
+		}
+		const contentType = ext ? mimeTypes[ext] ?? 'application/octet-stream' : 'application/octet-stream'
+
+		return new Response(readResult.value, {
+			headers: {
+				'Content-Type': contentType,
+				'Content-Length': readResult.value.length.toString(),
+				'Content-Disposition': `inline; filename="${filename}"`,
+			},
+		})
+	})
+
+	return app
+}

package/src/transport/rpc/index.ts

@@ -0,0 +1,11 @@
+/**
+ * RPC Module
+ *
+ * Re-exports for type-safe RPC between agent-server and SPA client.
+ */
+
+// Chat message types (re-exported from user-chat plugin)
+export type { AgentChatMessage, AskUserChatMessage, ChatMessage, UserChatMessage } from '~/plugins/user-chat/index.js'
+
+// RPC type helpers (inferred from system composition)
+export type { RpcInput, RpcMethodDef, RpcMethodName, RpcMethods, RpcOutput } from './methods.js'

package/src/transport/rpc/methods.ts

@@ -0,0 +1,38 @@
+/**
+ * RPC Method Types
+ *
+ * Types are inferred from plugin definitions via the system composition.
+ * Method schemas carry pre-resolved TS types (not Zod wrappers), so no z.infer needed.
+ */
+
+import type { BuiltinMethodSchemas } from '~/bootstrap.js'
+import type { MethodSchema } from '~/core/system.js'
+
+// ============================================================================
+// RPC Method Types (inferred from system composition)
+// ============================================================================
+
+export type RpcMethods = BuiltinMethodSchemas
+export type RpcMethodName = string & keyof RpcMethods
+
+// Strip index signatures from mapped types (e.g. Zod v4's Record<string, never> for empty objects)
+type RemoveIndexSignature<T> = {
+	[K in keyof T as string extends K ? never : K]: T[K]
+}
+
+// Helper types to extract input/output types from method definitions
+// Session methods (marked with __session) automatically include sessionId in input
+// Types are already resolved in the brands — direct indexed access, no z.infer needed.
+export type RpcInput<M extends RpcMethodName> = RpcMethods[M] extends { __session: true }
+	? RemoveIndexSignature<RpcMethods[M]['input']> & { sessionId: string }
+	: RpcMethods[M]['input']
+export type RpcOutput<M extends RpcMethodName> = RpcMethods[M]['output']
+
+// Method definition type (for handler implementations)
+export type RpcMethodDef<M extends RpcMethodName> = {
+	input: RpcMethods[M]['input']
+	output: RpcMethods[M]['output']
+}
+
+// Generic method schema type — for consumers that need the shape without specific method names
+export type { MethodSchema }

package/src/user-config.ts

@@ -0,0 +1,33 @@
+/**
+ * User Configuration type + defineConfig helper.
+ *
+ * The runtime loader (`loadUserConfig`) lives in the Bun runtime package
+ * since it performs dynamic imports that require a runtime context.
+ */
+
+import type { Preset } from '~/core/preset/index.js'
+import type { ExtraBind } from '~/plugins/shell/plugin.js'
+
+/**
+ * User configuration for the agent server.
+ */
+export interface RojConfig {
+	/** Base directory for sessions (default: cwd) */
+	sessionsDir?: string
+	/** Whether sandbox (bwrap) is active (default: true) */
+	sandboxed?: boolean
+	/** Enable snapshotter for tracking file changes (e.g. 'jj' for Jujutsu VCS) */
+	snapshotter?: 'jj'
+	/** Extra paths to bind-mount inside bwrap sandbox */
+	extraBinds?: ExtraBind[]
+	/** Presets available in this configuration */
+	presets: Preset[]
+}
+
+/**
+ * Type sugar for defining configuration (like Vite, Vitest, etc.).
+ * Provides better DX with type inference.
+ */
+export function defineConfig(config: RojConfig): RojConfig {
+	return config
+}