@roj-ai/standalone-server 0.1.11 → 0.1.12

package/dist/files-upload-route.d.ts

@@ -0,0 +1,36 @@
+/**
+ * POST /api/v1/files/upload — multipart endpoint matching the `@roj-ai/client/platform.files.upload`
+ * two-phase contract:
+ *
+ *   1. Preflight with `contentHash`, `filename`, `mimeType` only. If we already have
+ *      the bytes (sha-256 match), respond `{ ok, fileId, ..., deduped: true }`.
+ *      Otherwise respond 409 `{ error: 'file-required' }`.
+ *   2. Retry with the same fields plus a `file` blob. We persist the bytes,
+ *      record the file, and respond `{ ok, fileId, ..., deduped: false }`.
+ *
+ * No bearer auth (standalone is open) — but we accept and ignore an
+ * `Authorization: Bearer …` header so client code copy-pasted from the platform
+ * keeps working.
+ */
+import type { Context } from 'hono';
+import type { LocalRegistry } from './local-registry.js';
+interface Deps {
+    registry: LocalRegistry;
+}
+export declare function createFilesUploadRoute(deps: Deps): (c: Context) => Promise<(Response & import("hono").TypedResponse<{
+    ok: false;
+    error: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    ok: false;
+    error: "file-required";
+}, 409, "json">) | (Response & import("hono").TypedResponse<{
+    ok: true;
+    fileId: string;
+    filename: string;
+    mimeType: string;
+    size: number;
+    r2Key: string;
+    deduped: boolean;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
+export {};
+//# sourceMappingURL=files-upload-route.d.ts.map

package/dist/files-upload-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-upload-route.d.ts","sourceRoot":"","sources":["../src/files-upload-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAExD,UAAU,IAAI;IACb,QAAQ,EAAE,aAAa,CAAA;CACvB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,IAClC,GAAG,OAAO;;;;;;;;;;;;;;oEAwCxB"}

package/dist/files-upload-route.js

@@ -0,0 +1,50 @@
+/**
+ * POST /api/v1/files/upload — multipart endpoint matching the `@roj-ai/client/platform.files.upload`
+ * two-phase contract:
+ *
+ *   1. Preflight with `contentHash`, `filename`, `mimeType` only. If we already have
+ *      the bytes (sha-256 match), respond `{ ok, fileId, ..., deduped: true }`.
+ *      Otherwise respond 409 `{ error: 'file-required' }`.
+ *   2. Retry with the same fields plus a `file` blob. We persist the bytes,
+ *      record the file, and respond `{ ok, fileId, ..., deduped: false }`.
+ *
+ * No bearer auth (standalone is open) — but we accept and ignore an
+ * `Authorization: Bearer …` header so client code copy-pasted from the platform
+ * keeps working.
+ */
+export function createFilesUploadRoute(deps) {
+    return async (c) => {
+        let form;
+        try {
+            form = await c.req.formData();
+        }
+        catch {
+            return c.json({ ok: false, error: 'invalid_multipart' }, 400);
+        }
+        const contentHash = form.get('contentHash');
+        const filename = form.get('filename');
+        const mimeType = form.get('mimeType');
+        if (typeof contentHash !== 'string' || typeof filename !== 'string' || typeof mimeType !== 'string') {
+            return c.json({ ok: false, error: 'invalid_form' }, 400);
+        }
+        const file = form.get('file');
+        const buffer = file && typeof file !== 'string' && 'arrayBuffer' in file
+            ? Buffer.from(await file.arrayBuffer())
+            : undefined;
+        const result = await deps.registry.uploadFile({ buffer, filename, mimeType, contentHash });
+        if ('error' in result) {
+            // Preflight miss — client retries with body.
+            return c.json({ ok: false, error: result.error }, 409);
+        }
+        return c.json({
+            ok: true,
+            fileId: result.fileId,
+            filename: result.filename,
+            mimeType: result.mimeType,
+            size: result.size,
+            r2Key: '',
+            deduped: result.deduped,
+        });
+    };
+}
+//# sourceMappingURL=files-upload-route.js.map

package/dist/files-upload-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-upload-route.js","sourceRoot":"","sources":["../src/files-upload-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH,MAAM,UAAU,sBAAsB,CAAC,IAAU;IAChD,OAAO,KAAK,EAAE,CAAU,EAAE,EAAE;QAC3B,IAAI,IAAc,CAAA;QAClB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACrC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACrG,OAAO,CAAC,CAAC,IAAI,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,EACpC,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC7B,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,aAAa,IAAI,IAAI;YACvE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACvC,CAAC,CAAC,SAAS,CAAA;QAEZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;QAE1F,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACvB,6CAA6C;YAC7C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAA;QACvD,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACb,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,MAAM,CAAC,OAAO;SACvB,CAAC,CAAA;IACH,CAAC,CAAA;AACF,CAAC"}

package/dist/instance.d.ts

@@ -4,16 +4,22 @@
  * A standalone server hosts exactly one "instance" — a workspace containing
  * sessions. The instance id is either supplied via config or auto-generated
  * on startup and remains stable for the process lifetime.
+ *
+ * `metadata` is mutated by `instances.create` calls (last write wins). It is
+ * a single-tenant local-dev convenience; consumers that need per-instance
+ * isolation must run separate processes.
  */
 export interface InstanceState {
     id: string;
     name: string;
     createdAt: string;
     presetIds: string[];
+    metadata: Record<string, unknown> | null;
 }
 export declare function createInstance(options: {
     id?: string;
     name?: string;
     presetIds: string[];
+    metadata?: Record<string, unknown> | null;
 }): InstanceState;
 //# sourceMappingURL=instance.d.ts.map

package/dist/instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,aAAa,CAO1G"}
+{"version":3,"file":"instance.d.ts","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACxC;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACvC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CACzC,GAAG,aAAa,CAQhB"}

package/dist/instance.js

@@ -4,6 +4,10 @@
  * A standalone server hosts exactly one "instance" — a workspace containing
  * sessions. The instance id is either supplied via config or auto-generated
  * on startup and remains stable for the process lifetime.
+ *
+ * `metadata` is mutated by `instances.create` calls (last write wins). It is
+ * a single-tenant local-dev convenience; consumers that need per-instance
+ * isolation must run separate processes.
  */
 export function createInstance(options) {
     return {
@@ -11,6 +15,7 @@ export function createInstance(options) {
         name: options.name ?? 'standalone',
         createdAt: new Date().toISOString(),
         presetIds: options.presetIds,
+        metadata: options.metadata ?? null,
     };
 }
 //# sourceMappingURL=instance.js.map

package/dist/instance.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance.js","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,MAAM,UAAU,cAAc,CAAC,OAA4D;IAC1F,OAAO;QACN,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;KAC5B,CAAA;AACF,CAAC"}
+{"version":3,"file":"instance.js","sourceRoot":"","sources":["../src/instance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,MAAM,UAAU,cAAc,CAAC,OAK9B;IACA,OAAO;QACN,EAAE,EAAE,OAAO,CAAC,EAAE,IAAI,SAAS;QAC3B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,YAAY;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI;KAClC,CAAA;AACF,CAAC"}

package/dist/local-registry.d.ts

@@ -0,0 +1,109 @@
+/**
+ * On-disk file + resource registry for the standalone server.
+ *
+ * Stands in for the platform's Contember-backed file/resource service. State
+ * lives in `{dataPath}/.roj-platform-state.json` (JSON manifest) plus
+ * `{dataPath}/.roj-platform-state/files/{fileId}` (raw bytes). Operations are
+ * append-only at the resource level (revisions accumulate), so re-running
+ * `roj-standalone` between sessions preserves uploads and revisions added
+ * during a previous run.
+ *
+ * Files are content-addressable by SHA-256 — re-uploading the same bytes
+ * returns the existing fileId with `deduped: true`, mirroring the platform's
+ * /files/upload contract used by `@roj-ai/client/platform.files.upload`.
+ */
+import type { LocalResource, Logger } from '@roj-ai/sdk';
+interface FileMeta {
+    id: string;
+    filename: string;
+    mimeType: string;
+    size: number;
+    contentHash: string;
+    createdAt: string;
+}
+export interface ResourceOutput {
+    id: string;
+    slug: string;
+    name: string | null;
+    description: string | null;
+    latestRevision: {
+        id: string;
+        label: string | null;
+        file: {
+            id: string;
+            filename: string;
+            mimeType: string;
+            size: number;
+        };
+        createdAt: string;
+    } | null;
+    createdAt: string;
+}
+export interface UploadResult {
+    fileId: string;
+    filename: string;
+    mimeType: string;
+    size: number;
+    deduped: boolean;
+}
+export declare class LocalRegistry {
+    private readonly dataPath;
+    private readonly logger;
+    private state;
+    private statePath;
+    private filesDir;
+    constructor(dataPath: string, logger: Logger);
+    init(): Promise<void>;
+    uploadFile(args: {
+        buffer?: Buffer;
+        filename: string;
+        mimeType: string;
+        contentHash?: string;
+    }): Promise<UploadResult | {
+        error: 'file-required';
+        contentHash: string;
+    }>;
+    readFileById(fileId: string): Promise<{
+        meta: FileMeta;
+        buffer: Buffer;
+    } | null>;
+    createResource(args: {
+        slug: string;
+        name?: string;
+        description?: string;
+        fileId: string;
+        label?: string;
+    }): Promise<{
+        resourceId: string;
+        revisionId: string;
+    }>;
+    addRevision(args: {
+        resourceId?: string;
+        resourceSlug?: string;
+        fileId: string;
+        label?: string;
+    }): Promise<{
+        revisionId: string;
+        noop: boolean;
+    }>;
+    getResource(args: {
+        resourceId?: string;
+        resourceSlug?: string;
+    }): ResourceOutput | null;
+    listResources(): ResourceOutput[];
+    deleteResource(resourceId: string): Promise<{
+        ok: boolean;
+    }>;
+    /**
+     * Idempotent: ensures every config-declared local resource exists in the
+     * registry. Skips slugs that already have a record (so previously uploaded
+     * revisions survive restarts).
+     */
+    bootstrapLocalResources(localResources: LocalResource[]): Promise<void>;
+    private persist;
+    private findResource;
+    private findBySlug;
+}
+export declare function clearLocalRegistry(dataPath: string): Promise<void>;
+export {};
+//# sourceMappingURL=local-registry.d.ts.map

package/dist/local-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-registry.d.ts","sourceRoot":"","sources":["../src/local-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AAExD,UAAU,QAAQ;IACjB,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;CACjB;AAuBD,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,cAAc,EAAE;QACf,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QACpB,IAAI,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;QACtE,SAAS,EAAE,MAAM,CAAA;KACjB,GAAG,IAAI,CAAA;IACR,SAAS,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;CAChB;AAED,qBAAa,aAAa;IAMxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANxB,OAAO,CAAC,KAAK,CAA8C;IAC3D,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,QAAQ,CAAQ;gBAGN,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM;IAM1B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,UAAU,CAAC,IAAI,EAAE;QACtB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,CAAC,EAAE,MAAM,CAAA;KACpB,GAAG,OAAO,CAAC,YAAY,GAAG;QAAE,KAAK,EAAE,eAAe,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAqDrE,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAWhF,cAAc,CAAC,IAAI,EAAE;QAC1B,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,MAAM,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,CAAA;KACd,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAuBjD,WAAW,CAAC,IAAI,EAAE;QACvB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,MAAM,EAAE,MAAM,CAAA;QACd,KAAK,CAAC,EAAE,MAAM,CAAA;KACd,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC;IAwBlD,WAAW,CAAC,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,cAAc,GAAG,IAAI;IAKxF,aAAa,IAAI,cAAc,EAAE;IAI3B,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC;IAOlE;;;;OAIG;IACG,uBAAuB,CAAC,cAAc,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAsB/D,OAAO;IAMrB,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,UAAU;CAMlB;AAuCD,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxE"}

package/dist/local-registry.js

@@ -0,0 +1,252 @@
+/**
+ * On-disk file + resource registry for the standalone server.
+ *
+ * Stands in for the platform's Contember-backed file/resource service. State
+ * lives in `{dataPath}/.roj-platform-state.json` (JSON manifest) plus
+ * `{dataPath}/.roj-platform-state/files/{fileId}` (raw bytes). Operations are
+ * append-only at the resource level (revisions accumulate), so re-running
+ * `roj-standalone` between sessions preserves uploads and revisions added
+ * during a previous run.
+ *
+ * Files are content-addressable by SHA-256 — re-uploading the same bytes
+ * returns the existing fileId with `deduped: true`, mirroring the platform's
+ * /files/upload contract used by `@roj-ai/client/platform.files.upload`.
+ */
+import { createHash, randomUUID } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { basename, extname, join } from 'node:path';
+export class LocalRegistry {
+    dataPath;
+    logger;
+    state = { files: {}, resources: {} };
+    statePath;
+    filesDir;
+    constructor(dataPath, logger) {
+        this.dataPath = dataPath;
+        this.logger = logger;
+        this.statePath = join(dataPath, '.roj-platform-state.json');
+        this.filesDir = join(dataPath, '.roj-platform-state', 'files');
+    }
+    async init() {
+        await mkdir(this.filesDir, { recursive: true });
+        if (existsSync(this.statePath)) {
+            try {
+                const raw = await readFile(this.statePath, 'utf8');
+                this.state = JSON.parse(raw);
+            }
+            catch (err) {
+                this.logger.warn('Local registry manifest is corrupt, starting fresh', {
+                    err: err instanceof Error ? err.message : String(err),
+                });
+                this.state = { files: {}, resources: {} };
+            }
+        }
+    }
+    async uploadFile(args) {
+        // Phase 1 — preflight by hash. If we already have the bytes, return the
+        // existing fileId without needing the body.
+        if (args.contentHash) {
+            const existing = Object.values(this.state.files).find(f => f.contentHash === args.contentHash);
+            if (existing) {
+                return {
+                    fileId: existing.id,
+                    filename: existing.filename,
+                    mimeType: existing.mimeType,
+                    size: existing.size,
+                    deduped: true,
+                };
+            }
+            if (!args.buffer) {
+                return { error: 'file-required', contentHash: args.contentHash };
+            }
+        }
+        if (!args.buffer) {
+            throw new Error('uploadFile requires a buffer when contentHash is unknown');
+        }
+        const contentHash = args.contentHash ?? sha256Hex(args.buffer);
+        // Re-check after computing — the client may not have provided a hash but
+        // we still want dedupe.
+        const matched = Object.values(this.state.files).find(f => f.contentHash === contentHash);
+        if (matched) {
+            return {
+                fileId: matched.id,
+                filename: matched.filename,
+                mimeType: matched.mimeType,
+                size: matched.size,
+                deduped: true,
+            };
+        }
+        const id = randomUUID();
+        const meta = {
+            id,
+            filename: args.filename,
+            mimeType: args.mimeType,
+            size: args.buffer.length,
+            contentHash,
+            createdAt: new Date().toISOString(),
+        };
+        await writeFile(join(this.filesDir, id), args.buffer);
+        this.state.files[id] = meta;
+        await this.persist();
+        return { fileId: id, filename: meta.filename, mimeType: meta.mimeType, size: meta.size, deduped: false };
+    }
+    async readFileById(fileId) {
+        const meta = this.state.files[fileId];
+        if (!meta)
+            return null;
+        try {
+            const buffer = await readFile(join(this.filesDir, fileId));
+            return { meta, buffer };
+        }
+        catch {
+            return null;
+        }
+    }
+    async createResource(args) {
+        if (!this.state.files[args.fileId]) {
+            throw new Error(`File not found: ${args.fileId}`);
+        }
+        const existing = this.findBySlug(args.slug);
+        if (existing) {
+            throw new Error(`Resource with slug already exists: ${args.slug}`);
+        }
+        const resourceId = randomUUID();
+        const revisionId = randomUUID();
+        const now = new Date().toISOString();
+        this.state.resources[resourceId] = {
+            id: resourceId,
+            slug: args.slug,
+            name: args.name ?? null,
+            description: args.description ?? null,
+            revisions: [{ id: revisionId, fileId: args.fileId, label: args.label ?? null, createdAt: now }],
+            createdAt: now,
+        };
+        await this.persist();
+        return { resourceId, revisionId };
+    }
+    async addRevision(args) {
+        const record = this.findResource(args);
+        if (!record) {
+            throw new Error('Resource not found');
+        }
+        if (!this.state.files[args.fileId]) {
+            throw new Error(`File not found: ${args.fileId}`);
+        }
+        const latest = record.revisions[record.revisions.length - 1];
+        const incomingLabel = args.label ?? null;
+        if (latest && latest.fileId === args.fileId && latest.label === incomingLabel) {
+            return { revisionId: latest.id, noop: true };
+        }
+        const revisionId = randomUUID();
+        record.revisions.push({
+            id: revisionId,
+            fileId: args.fileId,
+            label: incomingLabel,
+            createdAt: new Date().toISOString(),
+        });
+        await this.persist();
+        return { revisionId, noop: false };
+    }
+    getResource(args) {
+        const record = this.findResource(args);
+        return record ? toResourceOutput(record, this.state.files) : null;
+    }
+    listResources() {
+        return Object.values(this.state.resources).map(r => toResourceOutput(r, this.state.files));
+    }
+    async deleteResource(resourceId) {
+        if (!this.state.resources[resourceId])
+            return { ok: true };
+        delete this.state.resources[resourceId];
+        await this.persist();
+        return { ok: true };
+    }
+    /**
+     * Idempotent: ensures every config-declared local resource exists in the
+     * registry. Skips slugs that already have a record (so previously uploaded
+     * revisions survive restarts).
+     */
+    async bootstrapLocalResources(localResources) {
+        for (const lr of localResources) {
+            if (this.findBySlug(lr.slug)) {
+                this.logger.info('Local resource already in registry, skipping bootstrap', { slug: lr.slug });
+                continue;
+            }
+            const buffer = await readFile(lr.path);
+            const filename = basename(lr.path);
+            const mimeType = guessMimeType(filename);
+            const upload = await this.uploadFile({ buffer, filename, mimeType });
+            if ('error' in upload) {
+                throw new Error(`Bootstrap upload failed for ${lr.slug}: ${upload.error}`);
+            }
+            await this.createResource({
+                slug: lr.slug,
+                name: lr.name ?? lr.slug,
+                fileId: upload.fileId,
+            });
+            this.logger.info('Bootstrapped local resource', { slug: lr.slug, fileId: upload.fileId, size: upload.size });
+        }
+    }
+    async persist() {
+        const tmp = `${this.statePath}.tmp`;
+        await writeFile(tmp, JSON.stringify(this.state, null, 2), 'utf8');
+        await rename(tmp, this.statePath);
+    }
+    findResource(args) {
+        if (args.resourceId)
+            return this.state.resources[args.resourceId] ?? null;
+        if (args.resourceSlug)
+            return this.findBySlug(args.resourceSlug);
+        return null;
+    }
+    findBySlug(slug) {
+        for (const r of Object.values(this.state.resources)) {
+            if (r.slug === slug)
+                return r;
+        }
+        return null;
+    }
+}
+function toResourceOutput(record, files) {
+    const latest = record.revisions[record.revisions.length - 1];
+    const file = latest ? files[latest.fileId] : undefined;
+    return {
+        id: record.id,
+        slug: record.slug,
+        name: record.name,
+        description: record.description,
+        latestRevision: latest && file
+            ? {
+                id: latest.id,
+                label: latest.label,
+                file: { id: file.id, filename: file.filename, mimeType: file.mimeType, size: file.size },
+                createdAt: latest.createdAt,
+            }
+            : null,
+        createdAt: record.createdAt,
+    };
+}
+function sha256Hex(buf) {
+    return createHash('sha256').update(buf).digest('hex');
+}
+function guessMimeType(filename) {
+    switch (extname(filename).toLowerCase()) {
+        case '.zip':
+            return 'application/zip';
+        case '.json':
+            return 'application/json';
+        default:
+            return 'application/octet-stream';
+    }
+}
+// Exported for tests / smoke scripts that want to nuke local state cleanly.
+export async function clearLocalRegistry(dataPath) {
+    const statePath = join(dataPath, '.roj-platform-state.json');
+    const filesDir = join(dataPath, '.roj-platform-state');
+    if (existsSync(statePath))
+        await rm(statePath);
+    if (existsSync(filesDir))
+        await rm(filesDir, { recursive: true });
+}
+//# sourceMappingURL=local-registry.js.map

package/dist/local-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-registry.js","sourceRoot":"","sources":["../src/local-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAuDnD,MAAM,OAAO,aAAa;IAMP;IACA;IANV,KAAK,GAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACnD,SAAS,CAAQ;IACjB,QAAQ,CAAQ;IAExB,YACkB,QAAgB,EAChB,MAAc;QADd,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAAQ;QAE/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAA;QAC3D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI;QACT,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;gBAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;oBACtE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACrD,CAAC,CAAA;gBACF,IAAI,CAAC,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;YAC1C,CAAC;QACF,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAKhB;QACA,wEAAwE;QACxE,4CAA4C;QAC5C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC,CAAA;YAC9F,IAAI,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACN,MAAM,EAAE,QAAQ,CAAC,EAAE;oBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,OAAO,EAAE,IAAI;iBACb,CAAA;YACF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAA;YACjE,CAAC;QACF,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAC5E,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAE9D,yEAAyE;QACzE,wBAAwB;QACxB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAA;QACxF,IAAI,OAAO,EAAE,CAAC;YACb,OAAO;gBACN,MAAM,EAAE,OAAO,CAAC,EAAE;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,IAAI;aACb,CAAA;QACF,CAAC;QAED,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;QACvB,MAAM,IAAI,GAAa;YACtB,EAAE;YACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YACxB,WAAW;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAA;QACD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACrD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;QAC3B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACzG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;YAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAA;QACZ,CAAC;IACF,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAMpB;QACA,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAA;QAC/B,MAAM,UAAU,GAAG,UAAU,EAAE,CAAA;QAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QACpC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG;YAClC,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAC/F,SAAS,EAAE,GAAG;SACd,CAAA;QACD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAKjB;QACA,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACtC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;QAClD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;QAC5D,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAA;QACxC,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;QAC7C,CAAC;QACD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAA;QAC/B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YACrB,EAAE,EAAE,UAAU;YACd,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,KAAK,EAAE,aAAa;YACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACnC,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;IACnC,CAAC;IAED,WAAW,CAAC,IAAoD;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACtC,OAAO,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,CAAC;IAED,aAAa;QACZ,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,UAAkB;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QACvC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,cAA+B;QAC5D,KAAK,MAAM,EAAE,IAAI,cAAc,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC7F,SAAQ;YACT,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;YACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;YAClC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;YACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpE,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3E,CAAC;YACD,MAAM,IAAI,CAAC,cAAc,CAAC;gBACzB,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI;gBACxB,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,CAAC,CAAA;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7G,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,OAAO;QACpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,MAAM,CAAA;QACnC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;QACjE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;IAClC,CAAC;IAEO,YAAY,CAAC,IAAoD;QACxE,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAA;QACzE,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChE,OAAO,IAAI,CAAA;IACZ,CAAC;IAEO,UAAU,CAAC,IAAY;QAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAA;QAC9B,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;CACD;AAED,SAAS,gBAAgB,CAAC,MAAsB,EAAE,KAA+B;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IACtD,OAAO;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,cAAc,EACb,MAAM,IAAI,IAAI;YACb,CAAC,CAAC;gBACD,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxF,SAAS,EAAE,MAAM,CAAC,SAAS;aAC3B;YACD,CAAC,CAAC,IAAI;QACR,SAAS,EAAE,MAAM,CAAC,SAAS;KAC3B,CAAA;AACF,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC7B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACtC,QAAQ,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACzC,KAAK,MAAM;YACV,OAAO,iBAAiB,CAAA;QACzB,KAAK,OAAO;YACX,OAAO,kBAAkB,CAAA;QAC1B;YACC,OAAO,0BAA0B,CAAA;IACnC,CAAC;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAgB;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,0BAA0B,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAA;IACtD,IAAI,UAAU,CAAC,SAAS,CAAC;QAAE,MAAM,EAAE,CAAC,SAAS,CAAC,CAAA;IAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAClE,CAAC"}

package/dist/main.js

@@ -17,13 +17,19 @@ async function main() {
         userConfig = await loadUserConfig(absoluteConfigPath);
         console.log(`Loaded config from: ${absoluteConfigPath}`);
         console.log(`  Presets: ${userConfig.presets.map(p => p.id).join(', ')}`);
+        if (userConfig.localResources?.length) {
+            console.log(`  Local resources: ${userConfig.localResources.map(r => r.slug).join(', ')}`);
+        }
     }
     catch (error) {
         console.error(`Failed to load config from ${absoluteConfigPath}:`);
         console.error(error instanceof Error ? error.message : String(error));
         process.exit(1);
     }
-    await startStandaloneServer({ presets: userConfig.presets });
+    await startStandaloneServer({
+        presets: userConfig.presets,
+        localResources: userConfig.localResources,
+    });
 }
 main().catch((error) => {
     console.error('Fatal error:', error);

package/dist/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,KAAK,UAAU,IAAI;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAA;IACrD,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAA;IAE7D,IAAI,UAAsD,CAAA;IAC1D,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,kBAAkB,EAAE,CAAC,CAAA;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,8BAA8B,kBAAkB,GAAG,CAAC,CAAA;QAClE,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;IAED,MAAM,qBAAqB,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAA;AAC7D,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAA;AAExD,KAAK,UAAU,IAAI;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,eAAe,CAAA;IACrD,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,CAAA;IAE7D,IAAI,UAAsD,CAAA;IAC1D,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,CAAA;QACrD,OAAO,CAAC,GAAG,CAAC,uBAAuB,kBAAkB,EAAE,CAAC,CAAA;QACxD,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACzE,IAAI,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,sBAAsB,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAC3F,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,8BAA8B,kBAAkB,GAAG,CAAC,CAAA;QAClE,OAAO,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAChB,CAAC;IAED,MAAM,qBAAqB,CAAC;QAC3B,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;KACzC,CAAC,CAAA;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACtB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC,CAAC,CAAA"}

package/dist/platform-api.d.ts

@@ -13,13 +13,20 @@
  * - sessions.publish   — publishing requires the CF platform
  * - instances.archive  — no-op; shutdown the server instead
  */
-import type { Logger, SessionManager } from '@roj-ai/sdk';
+import type { Logger, Preset, SessionManager } from '@roj-ai/sdk';
 import { Hono } from 'hono';
 import type { InstanceState } from './instance.js';
+import type { LocalRegistry } from './local-registry.js';
 interface Deps {
     instance: InstanceState;
     sessionManager: SessionManager;
     logger: Logger;
+    presets: Preset[];
+    registry: LocalRegistry;
+    /** HMAC secret for signing download tokens (`sessionFiles.createDownloadUrl`). */
+    tokenSecret: string;
+    /** Externally-reachable base URL (e.g. `http://localhost:8765`) used when minting download URLs. */
+    publicBaseUrl: string;
 }
 export declare function createPlatformApi(deps: Deps): Hono;
 export {};

package/dist/platform-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-api.d.ts","sourceRoot":"","sources":["../src/platform-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAElD,UAAU,IAAI;IACb,QAAQ,EAAE,aAAa,CAAA;IACvB,cAAc,EAAE,cAAc,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;CACd;AAQD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAuBlD"}
+{"version":3,"file":"platform-api.d.ts","sourceRoot":"","sources":["../src/platform-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAC3B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAGxD,UAAU,IAAI;IACb,QAAQ,EAAE,aAAa,CAAA;IACvB,cAAc,EAAE,cAAc,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,QAAQ,EAAE,aAAa,CAAA;IACvB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAA;IACnB,oGAAoG;IACpG,aAAa,EAAE,MAAM,CAAA;CACrB;AAQD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAuBlD"}