@roj-ai/sdk 0.1.3 → 0.1.4

package/dist/transport/adapter/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/transport/adapter/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGnD,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAA;AAC7E,OAAO,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAA;AAa7E,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAChE,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;QACvC,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;SAAM,CAAC;QACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;QACvC,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;AACF,CAAC"}

package/dist/transport/adapter/server-adapter.js

@@ -0,0 +1,73 @@
+/**
+ * Server Adapter
+ *
+ * Standalone mode - agent is the WebSocket server.
+ * Simplified for broadcast-only communication (agent -> SPA).
+ * User messages and answers are handled via REST API.
+ */
+import { ConnectionManager, ServerConnection } from '@roj-ai/transport/server';
+export class ServerAdapter {
+    connectionManager;
+    logger;
+    wsToConnectionId = new WeakMap();
+    constructor(config = {}) {
+        this.logger = config.logger?.child({ component: 'ServerAdapter' });
+        this.connectionManager = new ConnectionManager();
+    }
+    async start() {
+        this.logger?.info('Server adapter started');
+    }
+    async stop() {
+        this.connectionManager.clear();
+        this.logger?.info('Server adapter stopped');
+    }
+    broadcast(notification) {
+        // Extract sessionId from payload for routing to the correct session's subscribers
+        const payload = notification.payload;
+        if (typeof payload !== 'object' || payload === null || !('sessionId' in payload)) {
+            this.logger?.warn('Notification dropped: no sessionId in payload', { type: notification.type });
+            return;
+        }
+        const sessionId = String(payload.sessionId);
+        const wireMessage = JSON.stringify({ type: notification.type, payload: notification.payload, ts: Date.now() });
+        this.connectionManager.broadcast(sessionId, wireMessage);
+    }
+    // ============================================================================
+    // WebSocket Handler Integration (called from Bun server)
+    // ============================================================================
+    handleOpen(ws, sessionId) {
+        const connection = new ServerConnection({});
+        // No handlers needed - SPA doesn't send anything via WebSocket
+        // Session subscription is determined by sessionId passed at connection time
+        connection.attach(ws);
+        this.connectionManager.add(connection);
+        this.wsToConnectionId.set(ws, connection.getConnectionId());
+        // If sessionId provided, auto-subscribe
+        if (sessionId) {
+            this.connectionManager.subscribe(connection.getConnectionId(), sessionId);
+            this.logger?.debug('Client connected and subscribed', { connectionId: connection.getConnectionId(), sessionId });
+        }
+        else {
+            this.logger?.debug('Client connected', { connectionId: connection.getConnectionId() });
+        }
+    }
+    handleClose(ws, code, reason) {
+        const connectionId = this.wsToConnectionId.get(ws);
+        if (connectionId) {
+            this.connectionManager.remove(connectionId);
+            this.wsToConnectionId.delete(ws);
+            this.logger?.debug('Client disconnected', { connectionId, code, reason });
+        }
+    }
+    handleMessage(ws, message) {
+        // Forward message to the connection's onmessage handler
+        ws.onmessage?.(message);
+    }
+    handleError(_ws, error) {
+        this.logger?.error('WebSocket error', error);
+    }
+    getConnectionManager() {
+        return this.connectionManager;
+    }
+}
+//# sourceMappingURL=server-adapter.js.map

package/dist/transport/adapter/server-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-adapter.js","sourceRoot":"","sources":["../../../src/transport/adapter/server-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAA;AAQ9E,MAAM,OAAO,aAAa;IACR,iBAAiB,CAAmB;IACpC,MAAM,CAAS;IACf,gBAAgB,GAAG,IAAI,OAAO,EAA4B,CAAA;IAE3E,YAAY,SAA8B,EAAE;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAA;QAC9B,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA;IAC5C,CAAC;IAED,SAAS,CAAC,YAAgC;QACzC,kFAAkF;QAClF,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAA;QACpC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,+CAA+C,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAA;YAC/F,OAAM;QACP,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;QAC9G,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACzD,CAAC;IAED,+EAA+E;IAC/E,yDAAyD;IACzD,+EAA+E;IAE/E,UAAU,CAAC,EAAoB,EAAE,SAAkB;QAClD,MAAM,UAAU,GAAG,IAAI,gBAAgB,CAA2B,EAAE,CAAC,CAAA;QAErE,+DAA+D;QAC/D,4EAA4E;QAE5E,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACrB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,eAAe,EAAE,CAAC,CAAA;QAE3D,wCAAwC;QACxC,IAAI,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAA;YACzE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,iCAAiC,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QACjH,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,eAAe,EAAE,EAAE,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;IAED,WAAW,CAAC,EAAoB,EAAE,IAAY,EAAE,MAAc;QAC7D,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClD,IAAI,YAAY,EAAE,CAAC;YAClB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;YAC3C,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAChC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,qBAAqB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1E,CAAC;IACF,CAAC;IAED,aAAa,CAAC,EAAoB,EAAE,OAAe;QAClD,wDAAwD;QACxD,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAA;IACxB,CAAC;IAED,WAAW,CAAC,GAAqB,EAAE,KAAY;QAC9C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;IAC7C,CAAC;IAED,oBAAoB;QACnB,OAAO,IAAI,CAAC,iBAAiB,CAAA;IAC9B,CAAC;CACD"}

package/dist/transport/adapter/types.js

@@ -0,0 +1,8 @@
+/**
+ * Agent Transport Types
+ *
+ * Simplified for broadcast-only WebSocket communication.
+ * User messages and answers are handled via REST API.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/transport/adapter/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/transport/adapter/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/transport/http/app.js

@@ -0,0 +1,86 @@
+/**
+ * Hono App Setup
+ *
+ * Creates the main HTTP application with middleware and routes.
+ */
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { createBearerAuth } from './middleware/bearer-auth.js';
+import { errorHandler } from './middleware/error-handler.js';
+import { createFileRoutes } from './routes/files.js';
+import { createResourceRoutes } from './routes/resources.js';
+import { createRpcRoutes } from './routes/rpc.js';
+import { createUploadRoutes } from './routes/upload.js';
+/**
+ * Type-safe accessor for services from Hono context.
+ * Guarantees services are present (set by middleware).
+ */
+export function getServices(c) {
+    return c.get('services');
+}
+/**
+ * Creates the Hono application with all middleware and routes.
+ */
+export function createApp(services) {
+    const app = new Hono();
+    // Middleware
+    app.use('*', cors());
+    app.use('*', async (c, next) => {
+        c.set('services', services);
+        await next();
+    });
+    // Error handler
+    app.onError(errorHandler);
+    // Health check (public - no auth required)
+    app.get('/health', (c) => {
+        return c.json({
+            status: 'ok',
+            timestamp: Date.now(),
+        });
+    });
+    // Bearer auth for protected routes
+    const bearerAuth = createBearerAuth(services.agentToken);
+    // Activity status for DO polling (protected)
+    // Returns lastActivityAt timestamp for the caller to determine if agent is active
+    app.get('/status', bearerAuth, async (c) => {
+        const { sessionRuntime } = getServices(c);
+        const stats = await sessionRuntime.getStats();
+        return c.json({
+            lastActivityAt: stats.lastActivityAt,
+            stats: {
+                sessionCount: stats.sessionCount,
+                pendingAgents: stats.pendingAgents,
+                processingAgents: stats.processingAgents,
+            },
+            sessions: stats.sessions.map(s => ({
+                id: s.id,
+                presetId: s.presetId,
+                status: s.status,
+                metrics: s.metrics,
+            })),
+            timestamp: Date.now(),
+        });
+    });
+    // Protected routes
+    const rpcRoutes = createRpcRoutes();
+    const uploadRoutes = createUploadRoutes();
+    const resourceRoutes = createResourceRoutes();
+    const fileRoutes = createFileRoutes();
+    app.use('/rpc/*', bearerAuth);
+    app.use('/sessions/*', bearerAuth);
+    app.route('/rpc', rpcRoutes);
+    app.route('/sessions', uploadRoutes);
+    app.route('/sessions', resourceRoutes);
+    app.route('/sessions', fileRoutes);
+    // 404 handler
+    app.notFound((c) => {
+        return c.json({
+            error: {
+                type: 'not_found',
+                message: `Route not found: ${c.req.method} ${c.req.path}`,
+            },
+        }, 404);
+    });
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/transport/http/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/transport/http/app.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AA2BvD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAa;IACxC,OAAO,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,QAAqB;IAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;IACpB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC9B,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC3B,MAAM,IAAI,EAAE,CAAA;IACb,CAAC,CAAC,CAAA;IAEF,gBAAgB;IAChB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAEzB,2CAA2C;IAC3C,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,mCAAmC;IACnC,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAExD,6CAA6C;IAC7C,kFAAkF;IAClF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1C,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,CAAA;QAE7C,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE;gBACN,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;aACxC;YACD,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO;aAClB,CAAC,CAAC;YACH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,mBAAmB;IACnB,MAAM,SAAS,GAAG,eAAe,EAAE,CAAA;IACnC,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAA;IACzC,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAA;IAC7C,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAA;IAErC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IAC7B,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IAClC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC5B,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IACpC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;IACtC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAElC,cAAc;IACd,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE;QAClB,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,KAAK,EAAE;gBACN,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;aACzD;SACD,EACD,GAAG,CACH,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/transport/http/index.js

@@ -0,0 +1,6 @@
+/**
+ * HTTP module exports
+ */
+export { createApp } from './app.js';
+export { errorHandler } from './middleware/error-handler.js';
+//# sourceMappingURL=index.js.map

package/dist/transport/http/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/transport/http/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA"}

package/dist/transport/http/middleware/bearer-auth.js

@@ -0,0 +1,33 @@
+/**
+ * Bearer Auth Middleware
+ *
+ * Validates Authorization: Bearer <token> header against configured agentToken.
+ * Only active when agentToken is configured (worker mode).
+ */
+/**
+ * Creates bearer auth middleware.
+ * Returns 401 if token is invalid or missing (when required).
+ *
+ * @param expectedToken - The expected bearer token. If undefined, middleware is a no-op.
+ */
+export function createBearerAuth(expectedToken) {
+    return async (c, next) => {
+        // Skip auth if no token configured (local dev mode)
+        if (!expectedToken) {
+            return next();
+        }
+        const authHeader = c.req.header('Authorization');
+        if (!authHeader) {
+            return c.json({ error: { type: 'unauthorized', message: 'Missing Authorization header' } }, 401);
+        }
+        const [scheme, token] = authHeader.split(' ');
+        if (scheme !== 'Bearer' || !token) {
+            return c.json({ error: { type: 'unauthorized', message: 'Invalid Authorization header format' } }, 401);
+        }
+        if (token !== expectedToken) {
+            return c.json({ error: { type: 'unauthorized', message: 'Invalid token' } }, 401);
+        }
+        return next();
+    };
+}
+//# sourceMappingURL=bearer-auth.js.map

package/dist/transport/http/middleware/bearer-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer-auth.js","sourceRoot":"","sources":["../../../../src/transport/http/middleware/bearer-auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,aAAiC;IACjE,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACxB,oDAAoD;QACpD,IAAI,CAAC,aAAa,EAAE,CAAC;YACpB,OAAO,IAAI,EAAE,CAAA;QACd,CAAC;QAED,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;QAChD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACjG,CAAC;QAED,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7C,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qCAAqC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QACxG,CAAC;QAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAClF,CAAC;QAED,OAAO,IAAI,EAAE,CAAA;IACd,CAAC,CAAA;AACF,CAAC"}

package/dist/transport/http/middleware/error-handler.js

@@ -0,0 +1,56 @@
+/**
+ * Error Handler Middleware
+ *
+ * Handles all errors thrown during request processing:
+ * - HTTPException from Hono
+ * - Domain errors from business logic (self-describing with httpStatus)
+ * - Validation errors from Zod
+ * - Unknown errors (logged and returned as 500)
+ */
+import { HTTPException } from 'hono/http-exception';
+import { isDomainError } from '../../../core/errors.js';
+/**
+ * Global error handler for Hono app.
+ */
+export const errorHandler = (error, c) => {
+    const services = c.get('services');
+    const logger = services?.logger;
+    // HTTPException (from Hono)
+    if (error instanceof HTTPException) {
+        return c.json({
+            error: {
+                type: 'http_error',
+                message: error.message,
+            },
+        }, error.status);
+    }
+    // Domain errors (self-describing — carry their own httpStatus)
+    if (isDomainError(error)) {
+        return c.json({ error: { type: error.type, message: error.message } }, error.httpStatus);
+    }
+    // Validation errors (from Zod)
+    if (error.name === 'ZodError') {
+        const zodError = error;
+        return c.json({
+            error: {
+                type: 'validation_error',
+                message: 'Invalid request',
+                details: zodError.issues,
+            },
+        }, 400);
+    }
+    // Unknown errors
+    if (logger) {
+        logger.error('Unhandled error', error);
+    }
+    else {
+        console.error('Unhandled error (no logger available):', error);
+    }
+    return c.json({
+        error: {
+            type: 'internal_error',
+            message: 'Internal server error',
+        },
+    }, 500);
+};
+//# sourceMappingURL=error-handler.js.map

package/dist/transport/http/middleware/error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-handler.js","sourceRoot":"","sources":["../../../../src/transport/http/middleware/error-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGhD;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAY,EAAE,CAAkB,EAAE,EAAE;IAChE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAA;IAE/B,4BAA4B;IAC5B,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,KAAK,EAAE;gBACN,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB;SACD,EACD,KAAK,CAAC,MAAM,CACZ,CAAA;IACF,CAAC;IAED,+DAA+D;IAC/D,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EACvD,KAAK,CAAC,UAAkC,CACxC,CAAA;IACF,CAAC;IAED,+BAA+B;IAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,KAA6B,CAAA;QAC9C,OAAO,CAAC,CAAC,IAAI,CACZ;YACC,KAAK,EAAE;gBACN,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,iBAAiB;gBAC1B,OAAO,EAAE,QAAQ,CAAC,MAAM;aACxB;SACD,EACD,GAAG,CACH,CAAA;IACF,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAA;IACvC,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAA;IAC/D,CAAC;IAED,OAAO,CAAC,CAAC,IAAI,CACZ;QACC,KAAK,EAAE;YACN,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,uBAAuB;SAChC;KACD,EACD,GAAG,CACH,CAAA;AACF,CAAC,CAAA"}

package/dist/transport/http/routes/files.js

@@ -0,0 +1,237 @@
+/**
+ * File Proxy Routes
+ *
+ * Serves session files (e.g. screenshots from tools) via HTTP.
+ * Used by the debug UI to display images from LLM call logs.
+ */
+import { Hono } from 'hono';
+import { extname, resolve } from 'node:path';
+import { SessionId } from '../../../core/sessions/schema.js';
+import { getServices } from '../app.js';
+// ============================================================================
+// Constants
+// ============================================================================
+/** Known MIME types for specific extensions. */
+const MIME_TYPES = {
+    // Images
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.png': 'image/png',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+    '.svg': 'image/svg+xml',
+    '.ico': 'image/x-icon',
+    '.bmp': 'image/bmp',
+    '.avif': 'image/avif',
+    // Video
+    '.mp4': 'video/mp4',
+    '.webm': 'video/webm',
+    '.mov': 'video/quicktime',
+    // Audio
+    '.mp3': 'audio/mpeg',
+    '.wav': 'audio/wav',
+    '.ogg': 'audio/ogg',
+    // Documents
+    '.pdf': 'application/pdf',
+    // Data/markup
+    '.json': 'application/json',
+    '.html': 'text/html',
+    '.css': 'text/css',
+    '.js': 'application/javascript',
+    '.mjs': 'application/javascript',
+    '.xml': 'text/xml',
+    '.yaml': 'text/yaml',
+    '.yml': 'text/yaml',
+    '.md': 'text/markdown',
+    // Archives
+    '.zip': 'application/zip',
+    '.tar': 'application/x-tar',
+    '.gz': 'application/gzip',
+    // Fonts
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.ttf': 'font/ttf',
+    '.otf': 'font/otf',
+    // Binary
+    '.wasm': 'application/wasm',
+};
+/** Extensions known to be binary — files that cannot be displayed as text. */
+const BINARY_EXTENSIONS = new Set([
+    // Images
+    '.jpg',
+    '.jpeg',
+    '.png',
+    '.gif',
+    '.webp',
+    '.bmp',
+    '.ico',
+    '.tiff',
+    '.tif',
+    '.avif',
+    // Video
+    '.mp4',
+    '.webm',
+    '.avi',
+    '.mov',
+    '.mkv',
+    '.flv',
+    '.wmv',
+    // Audio
+    '.mp3',
+    '.wav',
+    '.ogg',
+    '.flac',
+    '.aac',
+    '.wma',
+    '.m4a',
+    // Archives
+    '.zip',
+    '.tar',
+    '.gz',
+    '.bz2',
+    '.xz',
+    '.7z',
+    '.rar',
+    '.zst',
+    // Documents (binary)
+    '.pdf',
+    '.doc',
+    '.docx',
+    '.xls',
+    '.xlsx',
+    '.ppt',
+    '.pptx',
+    '.odt',
+    // Fonts
+    '.woff',
+    '.woff2',
+    '.ttf',
+    '.otf',
+    '.eot',
+    // Compiled/binary
+    '.wasm',
+    '.exe',
+    '.dll',
+    '.so',
+    '.dylib',
+    '.o',
+    '.a',
+    '.class',
+    '.pyc',
+    '.pyo',
+    // Database
+    '.sqlite',
+    '.db',
+    '.sqlite3',
+    // Other
+    '.bin',
+    '.dat',
+]);
+// ============================================================================
+// Helpers
+// ============================================================================
+/**
+ * Determine MIME type for a file.
+ * Known extensions get their specific MIME type, known binary extensions
+ * get `application/octet-stream`, everything else defaults to `text/plain`
+ * so that code/config files (.astro, .vue, .svelte, .go, .rs, etc.)
+ * are previewable as text.
+ */
+function getMimeType(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    if (MIME_TYPES[ext])
+        return MIME_TYPES[ext];
+    if (BINARY_EXTENSIONS.has(ext))
+        return 'application/octet-stream';
+    return 'text/plain';
+}
+/**
+ * Extract the wildcard path suffix from a request.
+ *
+ * Hono's c.req.param('*') doesn't work in sub-routers mounted via app.route(),
+ * so we extract it from c.req.path by finding the marker segment and taking everything after it.
+ */
+function extractWildcardPath(c, marker) {
+    const idx = c.req.path.indexOf(`/${marker}/`);
+    if (idx === -1)
+        return '';
+    return c.req.path.slice(idx + marker.length + 2);
+}
+function preventTraversal(baseDir, requestedPath) {
+    const resolved = resolve(baseDir, requestedPath);
+    if (!resolved.startsWith(baseDir + '/') && resolved !== baseDir) {
+        return null;
+    }
+    return resolved;
+}
+async function serveFile(c, filePath) {
+    const { platform } = getServices(c);
+    let data;
+    try {
+        data = await platform.fs.readFile(filePath);
+    }
+    catch {
+        return c.json({ error: { type: 'not_found', message: 'File not found' } }, 404);
+    }
+    const contentType = getMimeType(filePath);
+    return new Response(data, {
+        headers: {
+            'Content-Type': contentType,
+            'Content-Length': data.length.toString(),
+            'Cache-Control': 'public, max-age=3600',
+        },
+    });
+}
+async function resolveWorkspaceDir(c, sessionId) {
+    const { sessionRuntime } = getServices(c);
+    const result = await sessionRuntime.getSession(SessionId(sessionId));
+    if (!result.ok)
+        return null;
+    return result.value.state.workspaceDir ?? null;
+}
+// ============================================================================
+// Routes
+// ============================================================================
+/**
+ * Creates file proxy routes.
+ *
+ * GET /:sessionId/files/*path              - Serve session file
+ * GET /:sessionId/workspace/*path          - Serve workspace file
+ */
+export function createFileRoutes() {
+    const app = new Hono();
+    // --- Serve session file ---
+    app.get('/:sessionId/files/*', async (c) => {
+        const { config } = getServices(c);
+        const sessionId = c.req.param('sessionId');
+        const filePath = extractWildcardPath(c, 'files');
+        if (!filePath) {
+            return c.json({ error: { type: 'validation_error', message: 'File path is required' } }, 400);
+        }
+        const sessionDir = resolve(config.dataPath, 'sessions', sessionId);
+        const resolvedPath = preventTraversal(sessionDir, filePath);
+        if (!resolvedPath) {
+            return c.json({ error: { type: 'forbidden', message: 'Path traversal not allowed' } }, 403);
+        }
+        return serveFile(c, resolvedPath);
+    });
+    // --- Serve workspace file ---
+    app.get('/:sessionId/workspace/*', async (c) => {
+        const sessionId = c.req.param('sessionId');
+        const filePath = extractWildcardPath(c, 'workspace');
+        if (!filePath) {
+            return c.json({ error: { type: 'validation_error', message: 'File path is required' } }, 400);
+        }
+        const workspaceDir = await resolveWorkspaceDir(c, sessionId);
+        if (!workspaceDir) {
+            return c.json({ error: { type: 'not_found', message: 'No workspace configured for this session' } }, 404);
+        }
+        const resolvedPath = preventTraversal(resolve(workspaceDir), filePath);
+        if (!resolvedPath) {
+            return c.json({ error: { type: 'forbidden', message: 'Path traversal not allowed' } }, 403);
+        }
+        return serveFile(c, resolvedPath);
+    });
+    return app;
+}
+//# sourceMappingURL=files.js.map

package/dist/transport/http/routes/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/files.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACrD,OAAO,EAAgC,WAAW,EAAE,MAAM,WAAW,CAAA;AAErE,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E,gDAAgD;AAChD,MAAM,UAAU,GAA2B;IAC1C,SAAS;IACT,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,QAAQ;IACR,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,iBAAiB;IACzB,QAAQ;IACR,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,YAAY;IACZ,MAAM,EAAE,iBAAiB;IACzB,cAAc;IACd,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,wBAAwB;IAC/B,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,KAAK,EAAE,eAAe;IACtB,WAAW;IACX,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,mBAAmB;IAC3B,KAAK,EAAE,kBAAkB;IACzB,QAAQ;IACR,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,SAAS;IACT,OAAO,EAAE,kBAAkB;CAC3B,CAAA;AAED,8EAA8E;AAC9E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IACjC,SAAS;IACT,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,WAAW;IACX,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,qBAAqB;IACrB,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,kBAAkB;IAClB,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,IAAI;IACJ,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,MAAM;IACN,WAAW;IACX,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,MAAM;IACN,MAAM;CACN,CAAC,CAAA;AAEF,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,QAAgB;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAA;IAC3C,IAAI,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,0BAA0B,CAAA;IACjE,OAAO,YAAY,CAAA;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,CAAa,EAAE,MAAc;IACzD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,GAAG,CAAC,CAAA;IAC7C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IACzB,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,aAAqB;IAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;IAChD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjE,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,OAAO,QAAQ,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,CAAa,EAAE,QAAgB;IACvD,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IACnC,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC5C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAC3D,GAAG,CACH,CAAA;IACF,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAEzC,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE;YACR,cAAc,EAAE,WAAW;YAC3B,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YACxC,eAAe,EAAE,sBAAsB;SACvC;KACD,CAAC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,CAAa,EAAE,SAAiB;IAClE,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;IACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAA;AAC/C,CAAC;AAED,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,6BAA6B;IAC7B,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAa,EAAE,EAAE;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAE,CAAA;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAEhD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EACzE,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAA;QAClE,MAAM,YAAY,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAE3D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,EACvE,GAAG,CACH,CAAA;QACF,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,+BAA+B;IAC/B,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAa,EAAE,EAAE;QAC1D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAE,CAAA;QAC3C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAEpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,uBAAuB,EAAE,EAAE,EACzE,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,0CAA0C,EAAE,EAAE,EACrF,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAA;QACtE,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,EACvE,GAAG,CACH,CAAA;QACF,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}

package/dist/transport/http/routes/resources.js

@@ -0,0 +1,77 @@
+/**
+ * Resource injection routes.
+ *
+ * POST /sessions/:sessionId/inject-resource
+ * Downloads a file from a URL and injects it directly into the session workspace
+ * (ZIP files are extracted, other files are copied). Used by the worker to inject
+ * organization resources into sessions, bypassing the uploads/attachment pipeline.
+ */
+import { Hono } from 'hono';
+import { getServices } from '../app.js';
+import { SessionId } from '../../../core/sessions/schema.js';
+export function createResourceRoutes() {
+    const app = new Hono();
+    app.post('/:sessionId/inject-resource', async (c) => {
+        const { sessionRuntime, logger } = getServices(c);
+        const sessionId = SessionId(c.req.param('sessionId'));
+        // 1. Verify session exists
+        const sessionResult = await sessionRuntime.getSession(sessionId);
+        if (!sessionResult.ok) {
+            return c.json({ error: { type: 'session_not_found', message: `Session not found: ${sessionId}` } }, 404);
+        }
+        // 2. Parse JSON body
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: { type: 'parse_error', message: 'Failed to parse JSON body' } }, 400);
+        }
+        if (!body.url || !body.filename || !body.mimeType) {
+            return c.json({ error: { type: 'validation_error', message: 'Missing required fields: url, filename, mimeType' } }, 400);
+        }
+        // 3. Fetch URL
+        const maxSize = 50 * 1024 * 1024; // 50MB
+        let response;
+        try {
+            response = await fetch(body.url, { signal: AbortSignal.timeout(120_000) });
+        }
+        catch (err) {
+            return c.json({ error: { type: 'fetch_error', message: `Failed to fetch URL: ${err instanceof Error ? err.message : String(err)}` } }, 400);
+        }
+        if (!response.ok) {
+            return c.json({ error: { type: 'fetch_error', message: `URL returned ${response.status}` } }, 400);
+        }
+        // 4. Read response with size limit
+        const contentLength = response.headers.get('Content-Length');
+        if (contentLength && Number.parseInt(contentLength, 10) > maxSize) {
+            return c.json({ error: { type: 'validation_error', message: 'File too large (max 50MB)' } }, 400);
+        }
+        const arrayBuffer = await response.arrayBuffer();
+        if (arrayBuffer.byteLength > maxSize) {
+            return c.json({ error: { type: 'validation_error', message: 'File too large (max 50MB)' } }, 400);
+        }
+        const fileBuffer = Buffer.from(arrayBuffer);
+        // 5. Call resources plugin
+        const result = await sessionRuntime.callPluginMethod(sessionId, 'resources.inject', {
+            sessionId: String(sessionId),
+            filename: body.filename,
+            mimeType: body.mimeType,
+            size: fileBuffer.length,
+            fileBuffer,
+            metadata: body.metadata,
+        });
+        if (!result.ok) {
+            logger.error('Resource injection failed', undefined, { sessionId: String(sessionId), error: result.error });
+            return c.json({ error: { type: result.error.type, message: 'Resource injection failed' } }, 400);
+        }
+        const injectResult = result.value;
+        return c.json({
+            ok: true,
+            resourceId: injectResult.resourceId,
+            paths: injectResult.paths,
+        }, 201);
+    });
+    return app;
+}
+//# sourceMappingURL=resources.js.map

package/dist/transport/http/routes/resources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resources.js","sourceRoot":"","sources":["../../../../src/transport/http/routes/resources.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAE3B,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AAErD,MAAM,UAAU,oBAAoB;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAU,CAAA;IAE9B,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,KAAK,EAAE,CAAa,EAAE,EAAE;QAC/D,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAE,CAAC,CAAA;QAEtD,2BAA2B;QAC3B,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAChE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sBAAsB,SAAS,EAAE,EAAE,EAAE,EACpF,GAAG,CACH,CAAA;QACF,CAAC;QAED,qBAAqB;QACrB,IAAI,IAAsG,CAAA;QAC1G,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC1B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EACxE,GAAG,CACH,CAAA;QACF,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,kDAAkD,EAAE,EAAE,EACpG,GAAG,CACH,CAAA;QACF,CAAC;QAED,eAAe;QACf,MAAM,OAAO,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA,CAAC,OAAO;QACxC,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EACvH,GAAG,CACH,CAAA;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,EAC9E,GAAG,CACH,CAAA;QACF,CAAC;QAED,mCAAmC;QACnC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;QAC5D,IAAI,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC7E,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;QAChD,IAAI,WAAW,CAAC,UAAU,GAAG,OAAO,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC7E,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAE3C,2BAA2B;QAC3B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,EAAE;YACnF,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;YAC5B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,UAAU,CAAC,MAAM;YACvB,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACvB,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3G,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,EAAE,EAC5E,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,KAAgD,CAAA;QAE5E,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,KAAK,EAAE,YAAY,CAAC,KAAK;SACzB,EAAE,GAAG,CAAC,CAAA;IACR,CAAC,CAAC,CAAA;IAEF,OAAO,GAAG,CAAA;AACX,CAAC"}