@rudderhq/server 0.6.6-canary.0 → 0.6.6-canary.10

package/dist/app.js

@@ -5,7 +5,7 @@ import { RuntimeSupervisor, supervisedStart } from "./runtime/runtime-supervisor
 import { configureBrowserCapabilityDeployment } from "./services/browser-capability.js";
 export { resolveViteHmrPort } from "./bootstrap/create-http-app.js";
 export async function createRudderApp(db, opts) {
-    configureBrowserCapabilityDeployment(db, opts.deploymentMode);
+    configureBrowserCapabilityDeployment(db, opts.deploymentMode, opts.localRuntimeTrust);
     const supervisor = new RuntimeSupervisor({
         onDisposeError: ({ name, error }) => {
             logger.warn({ err: error, resource: name }, "Failed to close Rudder app resource");

package/dist/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAE7E,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAOpE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAM,EACN,IAAsB;IAEtB,oCAAoC,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC;QACvC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,eAAe,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,aAAa,GAAG,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,UAAU,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7D,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAElD,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;QAE5B,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE;SACR,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAM,EACN,IAA2C;IAE3C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAE7E,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAOpE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAM,EACN,IAAsB;IAEtB,oCAAoC,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,IAAI,iBAAiB,CAAC;QACvC,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,qCAAqC,CAAC,CAAC;QACrF,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,eAAe,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,aAAa,GAAG,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxD,UAAU,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7D,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAElD,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;QAE5B,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE;SACR,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAM,EACN,IAA2C;IAE3C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC"}

package/dist/bootstrap/auth-runtime.d.ts

@@ -0,0 +1,36 @@
+import type { Db } from "@rudderhq/db";
+import type { Request, RequestHandler } from "express";
+import type { BetterAuthSessionResult } from "../auth/better-auth.js";
+import type { Config } from "../config.js";
+import { type LocalAccountExchangePolicy } from "../services/local-account-auth.js";
+import { type LocalAccountSessionRevocation } from "../services/local-account-session-revocation.js";
+export interface LocalAccountAuthOptions {
+    identityOrigin: string;
+    audience: string;
+    sessionSecret: string;
+    secureCookie?: boolean;
+    offline?: {
+        identityKeyId: string;
+        identityPublicKeySpki: string;
+        expectedAccountId: string;
+        expectedDeviceId: string;
+        lastTrustedTimeMs: number;
+        localSignOutEpoch: number;
+    };
+}
+export interface AuthRuntime {
+    authReady: boolean;
+    betterAuthHandler?: RequestHandler;
+    resolveSession?: (req: Request) => Promise<BetterAuthSessionResult | null>;
+    resolveSessionFromHeaders?: (headers: Headers) => Promise<BetterAuthSessionResult | null>;
+    localAccountExchangePolicy?: LocalAccountExchangePolicy;
+    localAccountSessionRevocation?: LocalAccountSessionRevocation;
+}
+export declare function createAuthRuntime(options: {
+    db: Db;
+    config: Config;
+    instanceId: string;
+    localAccountAuth?: LocalAccountAuthOptions;
+    ensureLocalTrustedBoardPrincipal: () => Promise<void>;
+}): Promise<AuthRuntime>;
+//# sourceMappingURL=auth-runtime.d.ts.map

package/dist/bootstrap/auth-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-runtime.d.ts","sourceRoot":"","sources":["../../src/bootstrap/auth-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAGL,KAAK,0BAA0B,EAChC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,6BAA6B,EACnC,MAAM,iDAAiD,CAAC;AAEzD,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,CAAC,EAAE;QACR,aAAa,EAAE,MAAM,CAAC;QACtB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,cAAc,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC3E,yBAAyB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC1F,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,6BAA6B,CAAC,EAAE,6BAA6B,CAAC;CAC/D;AAOD,wBAAsB,iBAAiB,CAAC,OAAO,EAAE;IAC/C,EAAE,EAAE,EAAE,CAAC;IACP,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,uBAAuB,CAAC;IAC3C,gCAAgC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,WAAW,CAAC,CA4FvB"}

package/dist/bootstrap/auth-runtime.js

@@ -0,0 +1,81 @@
+import { initializeBoardClaimChallenge } from "../board-claim.js";
+import { logger } from "../middleware/logger.js";
+import { createIdentityServerExchangeVerifier, createLocalAccountSessionResolver, } from "../services/local-account-auth.js";
+import { createLocalAccountSessionRevocation, } from "../services/local-account-session-revocation.js";
+function isLoopbackHost(host) {
+    const normalized = host.trim().toLowerCase();
+    return normalized === "127.0.0.1" || normalized === "localhost" || normalized === "::1";
+}
+export async function createAuthRuntime(options) {
+    const { config, db, instanceId, localAccountAuth } = options;
+    const runtime = {
+        authReady: config.deploymentMode === "local_trusted",
+        localAccountSessionRevocation: localAccountAuth
+            ? createLocalAccountSessionRevocation()
+            : undefined,
+    };
+    if (config.deploymentMode === "local_trusted") {
+        await options.ensureLocalTrustedBoardPrincipal();
+    }
+    if (localAccountAuth) {
+        if (config.deploymentMode !== "local_trusted" || !isLoopbackHost(config.host)) {
+            throw new Error("Desktop account authentication is supported only by a loopback local_trusted runtime");
+        }
+        runtime.localAccountExchangePolicy = {
+            expectedIssuer: new URL(localAccountAuth.identityOrigin).origin,
+            audience: localAccountAuth.audience,
+            installationId: instanceId,
+            sessionSecret: localAccountAuth.sessionSecret,
+            secureCookie: localAccountAuth.secureCookie ?? false,
+            offline: localAccountAuth.offline,
+            verifier: createIdentityServerExchangeVerifier({
+                identityOrigin: localAccountAuth.identityOrigin,
+                expectedAudience: localAccountAuth.audience,
+                expectedInstallationId: instanceId,
+            }),
+        };
+        const resolveLocalSession = createLocalAccountSessionResolver(db, {
+            sessionSecret: localAccountAuth.sessionSecret,
+            secureCookie: localAccountAuth.secureCookie ?? false,
+        });
+        runtime.resolveSession = (req) => resolveLocalSession(req.headers);
+        runtime.resolveSessionFromHeaders = (headers) => {
+            const rawHeaders = {};
+            headers.forEach((value, key) => {
+                rawHeaders[key] = value;
+            });
+            return resolveLocalSession(rawHeaders);
+        };
+        runtime.authReady = true;
+    }
+    if (config.deploymentMode === "authenticated") {
+        const { createBetterAuthHandler, createBetterAuthInstance, deriveAuthTrustedOrigins, resolveBetterAuthSession, resolveBetterAuthSessionFromHeaders, } = await import("../auth/better-auth.js");
+        const betterAuthSecret = process.env.BETTER_AUTH_SECRET?.trim() ?? process.env.RUDDER_AGENT_JWT_SECRET?.trim();
+        if (!betterAuthSecret) {
+            throw new Error("authenticated mode requires BETTER_AUTH_SECRET (or RUDDER_AGENT_JWT_SECRET) to be set");
+        }
+        const derivedTrustedOrigins = deriveAuthTrustedOrigins(config);
+        const envTrustedOrigins = (process.env.BETTER_AUTH_TRUSTED_ORIGINS ?? "")
+            .split(",")
+            .map((value) => value.trim())
+            .filter((value) => value.length > 0);
+        const effectiveTrustedOrigins = Array.from(new Set([...derivedTrustedOrigins, ...envTrustedOrigins]));
+        logger.info({
+            authBaseUrlMode: config.authBaseUrlMode,
+            authPublicBaseUrl: config.authPublicBaseUrl ?? null,
+            trustedOrigins: effectiveTrustedOrigins,
+            trustedOriginsSource: {
+                derived: derivedTrustedOrigins.length,
+                env: envTrustedOrigins.length,
+            },
+        }, "Authenticated mode auth origin configuration");
+        const auth = createBetterAuthInstance(db, config, effectiveTrustedOrigins);
+        runtime.betterAuthHandler = createBetterAuthHandler(auth);
+        runtime.resolveSession = (req) => resolveBetterAuthSession(auth, req);
+        runtime.resolveSessionFromHeaders = (headers) => resolveBetterAuthSessionFromHeaders(auth, headers);
+        await initializeBoardClaimChallenge(db, { deploymentMode: config.deploymentMode });
+        runtime.authReady = true;
+    }
+    return runtime;
+}
+//# sourceMappingURL=auth-runtime.js.map

package/dist/bootstrap/auth-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-runtime.js","sourceRoot":"","sources":["../../src/bootstrap/auth-runtime.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EACL,oCAAoC,EACpC,iCAAiC,GAElC,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,mCAAmC,GAEpC,MAAM,iDAAiD,CAAC;AA0BzD,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAMvC;IACC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;IAC7D,MAAM,OAAO,GAAgB;QAC3B,SAAS,EAAE,MAAM,CAAC,cAAc,KAAK,eAAe;QACpD,6BAA6B,EAAE,gBAAgB;YAC7C,CAAC,CAAC,mCAAmC,EAAE;YACvC,CAAC,CAAC,SAAS;KACd,CAAC;IAEF,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9C,MAAM,OAAO,CAAC,gCAAgC,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,0BAA0B,GAAG;YACnC,cAAc,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,MAAM;YAC/D,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;YACnC,cAAc,EAAE,UAAU;YAC1B,aAAa,EAAE,gBAAgB,CAAC,aAAa;YAC7C,YAAY,EAAE,gBAAgB,CAAC,YAAY,IAAI,KAAK;YACpD,OAAO,EAAE,gBAAgB,CAAC,OAAO;YACjC,QAAQ,EAAE,oCAAoC,CAAC;gBAC7C,cAAc,EAAE,gBAAgB,CAAC,cAAc;gBAC/C,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ;gBAC3C,sBAAsB,EAAE,UAAU;aACnC,CAAC;SACH,CAAC;QACF,MAAM,mBAAmB,GAAG,iCAAiC,CAAC,EAAE,EAAE;YAChE,aAAa,EAAE,gBAAgB,CAAC,aAAa;YAC7C,YAAY,EAAE,gBAAgB,CAAC,YAAY,IAAI,KAAK;SACrD,CAAC,CAAC;QACH,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnE,OAAO,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC7B,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,OAAO,mBAAmB,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;QAC9C,MAAM,EACJ,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,mCAAmC,GACpC,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAC3C,MAAM,gBAAgB,GACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;QACxF,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,iBAAiB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,CAAC;aACtE,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,uBAAuB,GAAG,KAAK,CAAC,IAAI,CACxC,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAC1D,CAAC;QACF,MAAM,CAAC,IAAI,CACT;YACE,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;YACnD,cAAc,EAAE,uBAAuB;YACvC,oBAAoB,EAAE;gBACpB,OAAO,EAAE,qBAAqB,CAAC,MAAM;gBACrC,GAAG,EAAE,iBAAiB,CAAC,MAAM;aAC9B;SACF,EACD,8CAA8C,CAC/C,CAAC;QACF,MAAM,IAAI,GAAG,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,uBAAuB,CAAC,CAAC;QAC3E,OAAO,CAAC,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtE,OAAO,CAAC,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE,CAC9C,mCAAmC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,6BAA6B,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/bootstrap/auth-runtime.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth-runtime.test.d.ts.map

package/dist/bootstrap/auth-runtime.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-runtime.test.d.ts","sourceRoot":"","sources":["../../src/bootstrap/auth-runtime.test.ts"],"names":[],"mappings":""}

package/dist/bootstrap/auth-runtime.test.js

@@ -0,0 +1,51 @@
+import { describe, expect, it, vi } from "vitest";
+import { createAuthRuntime } from "./auth-runtime.js";
+function localTrustedConfig(host = "127.0.0.1") {
+    return {
+        deploymentMode: "local_trusted",
+        host,
+    };
+}
+describe("createAuthRuntime", () => {
+    it("wires local account exchange, HTTP, WebSocket, and revocation auth dependencies", async () => {
+        const ensureLocalTrustedBoardPrincipal = vi.fn(async () => undefined);
+        const runtime = await createAuthRuntime({
+            db: {},
+            config: localTrustedConfig(),
+            instanceId: "installation-1",
+            localAccountAuth: {
+                identityOrigin: "https://accounts.rudderhq.dev/path",
+                audience: "rudder-desktop",
+                sessionSecret: "local-session-secret",
+            },
+            ensureLocalTrustedBoardPrincipal,
+        });
+        expect(ensureLocalTrustedBoardPrincipal).toHaveBeenCalledOnce();
+        expect(runtime.authReady).toBe(true);
+        expect(runtime.localAccountExchangePolicy).toMatchObject({
+            expectedIssuer: "https://accounts.rudderhq.dev",
+            audience: "rudder-desktop",
+            installationId: "installation-1",
+            sessionSecret: "local-session-secret",
+            secureCookie: false,
+        });
+        expect(runtime.resolveSession).toBeTypeOf("function");
+        expect(runtime.resolveSessionFromHeaders).toBeTypeOf("function");
+        expect(await runtime.resolveSessionFromHeaders?.(new Headers())).toBeNull();
+        expect(runtime.localAccountSessionRevocation).toBeDefined();
+    });
+    it("rejects local account auth on a non-loopback runtime", async () => {
+        await expect(createAuthRuntime({
+            db: {},
+            config: localTrustedConfig("0.0.0.0"),
+            instanceId: "installation-1",
+            localAccountAuth: {
+                identityOrigin: "https://accounts.rudderhq.dev",
+                audience: "rudder-desktop",
+                sessionSecret: "local-session-secret",
+            },
+            ensureLocalTrustedBoardPrincipal: async () => undefined,
+        })).rejects.toThrow("Desktop account authentication is supported only by a loopback local_trusted runtime");
+    });
+});
+//# sourceMappingURL=auth-runtime.test.js.map

package/dist/bootstrap/auth-runtime.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-runtime.test.js","sourceRoot":"","sources":["../../src/bootstrap/auth-runtime.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,SAAS,kBAAkB,CAAC,IAAI,GAAG,WAAW;IAC5C,OAAO;QACL,cAAc,EAAE,eAAe;QAC/B,IAAI;KACK,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,gCAAgC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;YACtC,EAAE,EAAE,EAAW;YACf,MAAM,EAAE,kBAAkB,EAAE;YAC5B,UAAU,EAAE,gBAAgB;YAC5B,gBAAgB,EAAE;gBAChB,cAAc,EAAE,oCAAoC;gBACpD,QAAQ,EAAE,gBAAgB;gBAC1B,aAAa,EAAE,sBAAsB;aACtC;YACD,gCAAgC;SACjC,CAAC,CAAC;QAEH,MAAM,CAAC,gCAAgC,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,aAAa,CAAC;YACvD,cAAc,EAAE,+BAA+B;YAC/C,QAAQ,EAAE,gBAAgB;YAC1B,cAAc,EAAE,gBAAgB;YAChC,aAAa,EAAE,sBAAsB;YACrC,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,OAAO,CAAC,yBAAyB,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,CACV,iBAAiB,CAAC;YAChB,EAAE,EAAE,EAAW;YACf,MAAM,EAAE,kBAAkB,CAAC,SAAS,CAAC;YACrC,UAAU,EAAE,gBAAgB;YAC5B,gBAAgB,EAAE;gBAChB,cAAc,EAAE,+BAA+B;gBAC/C,QAAQ,EAAE,gBAAgB;gBAC1B,aAAa,EAAE,sBAAsB;aACtC;YACD,gCAAgC,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;SACxD,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CACf,sFAAsF,CACvF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/bootstrap/create-http-app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-http-app.d.ts","sourceRoot":"","sources":["../../src/bootstrap/create-http-app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,OAAO,MAAM,SAAS,CAAC;AAkB9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAsB,aAAa,CACjC,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,gBAAgB,EACtB,aAAa,EAAE,iBAAiB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAkLxB"}
+{"version":3,"file":"create-http-app.d.ts","sourceRoot":"","sources":["../../src/bootstrap/create-http-app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,OAAO,MAAM,SAAS,CAAC;AAmB9B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAsB,aAAa,CACjC,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,gBAAgB,EACtB,aAAa,EAAE,iBAAiB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAsLxB"}

package/dist/bootstrap/create-http-app.js

@@ -1,7 +1,9 @@
+import { authRequirementForDeploymentMode } from "@rudderhq/shared";
 import express from "express";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { accountSessionRequired } from "../middleware/account-session-required.js";
 import { actorMiddleware } from "../middleware/auth.js";
 import { errorHandler, httpLogger, markBrowserHttpRequestBodySensitive, } from "../middleware/index.js";
 import { logger } from "../middleware/logger.js";
@@ -89,8 +91,11 @@ export async function createHttpApp(db, opts, pluginRuntime) {
     }));
     app.use(actorMiddleware(db, {
         deploymentMode: opts.deploymentMode,
+        authRequirement: opts.authRequirement,
         resolveSession: opts.resolveSession,
     }));
+    const authRequirement = opts.authRequirement ?? authRequirementForDeploymentMode(opts.deploymentMode);
+    app.use(accountSessionRequired(authRequirement));
     app.get("/api/auth/get-session", (req, res) => {
         if (req.actor.type !== "board" || !req.actor.userId) {
             res.status(401).json({ error: "Unauthorized" });

package/dist/bootstrap/create-http-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-http-app.js","sourceRoot":"","sources":["../../src/bootstrap/create-http-app.ts"],"names":[],"mappings":"AACA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAC/G,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAQ7D,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,OAAO,UAAU,GAAG,MAAM,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAM,EACN,IAAsB,EACtB,aAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,IAAI,4BAA4B,IAAI,CAAC,UAAU,EAAE,CAAC;IACnG,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,EAAE,EAAE;QACtD,aAAa;QACb,qBAAqB,EAAE,CAAC,IAAI,CAAC,sBAAsB;KACpD,CAAC,CAAC;IACH,MAAM,qBAAqB,GAAG,2BAA2B,EAAE,CAAC;IAC5D,IAAI,SAAS,GAAiC,IAAI,CAAC;IACnD,IAAI,aAAa,GAAyB,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAChD,MAAM,WAAW,GAAG,SAAS,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;gBAC3D,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAC9C,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO;iBACrB,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;iBACjF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,EAAE,YAAqB,EAAkB,EAAE;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,kCAAkC,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,YAAY,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,0BAA0B,GAC9B,IAAI,CAAC,cAAc,KAAK,eAAe,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;IACnF,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IAEH,yEAAyE;IACzE,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,MAAM,gBAAgB,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACtE,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,yEAAyE;QACzE,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACxB,GAAsC,CAAC,OAAO,GAAG,GAAG,CAAC;QACxD,CAAC;KACF,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpB,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC;QACnB,OAAO,EAAE,0BAA0B;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CACL,eAAe,CAAC,EAAE,EAAE;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE;gBACP,EAAE,EAAE,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;gBACpD,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;aACzB;YACD,IAAI,EAAE;gBACJ,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;aACnE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CACL,MAAM,EACN,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CACpF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,EAAE;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,wBAAwB;SAChE,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG;gBACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC;aAC5C,CAAC;YACF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YACjG,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;oBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;gBAClC,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE;oBACN,cAAc,EAAE,IAAI;oBACpB,GAAG,EAAE;wBACH,IAAI,EAAE,IAAI,CAAC,QAAQ;wBACnB,IAAI,EAAE,OAAO;wBACb,UAAU,EAAE,OAAO;qBACpB;oBACD,YAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC3F;aACF,CAAC,CAAC;YACH,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAE/B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACrC,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBACxD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBACxD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACvF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC"}
+{"version":3,"file":"create-http-app.js","sourceRoot":"","sources":["../../src/bootstrap/create-http-app.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,yCAAyC,CAAC;AAC/G,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAQ7D,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QACzB,OAAO,UAAU,GAAG,MAAM,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,EAAM,EACN,IAAsB,EACtB,aAAgC;IAEhC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,aAAa,GAAG,IAAI,CAAC,sBAAsB,IAAI,4BAA4B,IAAI,CAAC,UAAU,EAAE,CAAC;IACnG,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,EAAE,EAAE;QACtD,aAAa;QACb,qBAAqB,EAAE,CAAC,IAAI,CAAC,sBAAsB;KACpD,CAAC,CAAC;IACH,MAAM,qBAAqB,GAAG,2BAA2B,EAAE,CAAC;IAC5D,IAAI,SAAS,GAAiC,IAAI,CAAC;IACnD,IAAI,aAAa,GAAyB,IAAI,CAAC;IAC/C,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,aAAa;YAAE,OAAO,aAAa,CAAC;QACxC,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAChD,MAAM,WAAW,GAAG,SAAS,CAAC;YAC9B,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;gBAC3D,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;aAC9C,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO;iBACrB,MAAM,CAAC,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;iBACjF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,eAAe,GAAG,KAAK,EAAE,YAAqB,EAAkB,EAAE;QACtE,IAAI,CAAC;YACH,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,kCAAkC,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,YAAY,CAAC;IACrB,CAAC,CAAC;IACF,MAAM,0BAA0B,GAC9B,IAAI,CAAC,cAAc,KAAK,eAAe,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;IACnF,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;QAC7D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;IAEH,yEAAyE;IACzE,4EAA4E;IAC5E,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,MAAM,gBAAgB,CAAC,wBAAwB,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QACtE,IAAI,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,yEAAyE;QACzE,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YACxB,GAAsC,CAAC,OAAO,GAAG,GAAG,CAAC;QACxD,CAAC;KACF,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpB,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC;QACnB,OAAO,EAAE,0BAA0B;QACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CACL,eAAe,CAAC,EAAE,EAAE;QAClB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CACH,CAAC;IACF,MAAM,eAAe,GACnB,IAAI,CAAC,eAAe,IAAI,gCAAgC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChF,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC,CAAC;IACjD,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE;gBACP,EAAE,EAAE,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;gBACpD,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;aACzB;YACD,IAAI,EAAE;gBACJ,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;aACnE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CACL,MAAM,EACN,iBAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,CACpF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,EAAE;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,wBAAwB;SAChE,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG;gBACjB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC;gBACxC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC;aAC5C,CAAC;YACF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YACjG,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC7F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;oBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;gBAClC,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,QAAQ;gBACjB,MAAM,EAAE;oBACN,cAAc,EAAE,IAAI;oBACpB,GAAG,EAAE;wBACH,IAAI,EAAE,IAAI,CAAC,QAAQ;wBACnB,IAAI,EAAE,OAAO;wBACb,UAAU,EAAE,OAAO;qBACpB;oBACD,YAAY,EAAE,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC3F;aACF,CAAC,CAAC;YACH,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAE/B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;gBACrC,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBACxD,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBACxD,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;oBACvF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACjE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,GAAG,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;AACH,CAAC"}

package/dist/bootstrap/register-api-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register-api-routes.d.ts","sourceRoot":"","sources":["../../src/bootstrap/register-api-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAWvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAsBlF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,gBAAgB,EACtB,aAAa,EAAE,iBAAiB,EAChC,gBAAgB,CAAC,EAAE,0BAA0B,EAC7C,qBAAqB,CAAC,EAAE,qBAAqB,8CA0E9C"}
+{"version":3,"file":"register-api-routes.d.ts","sourceRoot":"","sources":["../../src/bootstrap/register-api-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AAYvC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAuBlF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AACvF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,gBAAgB,EACtB,aAAa,EAAE,iBAAiB,EAChC,gBAAgB,CAAC,EAAE,0BAA0B,EAC7C,qBAAqB,CAAC,EAAE,qBAAqB,8CAkF9C"}

package/dist/bootstrap/register-api-routes.js

@@ -3,6 +3,7 @@ import { boardMutationGuard } from "../middleware/board-mutation-guard.js";
 import { accessRoutes } from "../routes/access.js";
 import { activityRoutes } from "../routes/activity.js";
 import { agentRoutes } from "../routes/agents.js";
+import { appBuilderRoutes } from "../routes/app-builder.js";
 import { approvalRoutes } from "../routes/approvals.js";
 import { assetRoutes } from "../routes/assets.js";
 import { automationRoutes } from "../routes/automations.js";
@@ -17,6 +18,7 @@ import { healthRoutes } from "../routes/health.js";
 import { instanceSettingsRoutes } from "../routes/instance-settings.js";
 import { integrationRoutes } from "../routes/integrations.js";
 import { issueRoutes } from "../routes/issues.js";
+import { localAccountAuthRoutes } from "../routes/local-account-auth.js";
 import { managedMcpAgentBindingRoutes } from "../routes/managed-mcp-agent-bindings.js";
 import { managedMcpConnectionRoutes } from "../routes/managed-mcp-connections.js";
 import { messengerRoutes } from "../routes/messenger.js";
@@ -32,6 +34,13 @@ import { websiteMetadataRoutes } from "../routes/website-metadata.js";
 export function registerApiRoutes(db, opts, pluginRuntime, workspacePreview, chatBackgroundRuntime) {
     const api = Router();
     api.use(boardMutationGuard());
+    if (opts.localAccountExchangePolicy && opts.instanceId) {
+        api.use(localAccountAuthRoutes(db, {
+            installationId: opts.instanceId,
+            exchangePolicy: opts.localAccountExchangePolicy,
+            sessionRevocation: opts.localAccountSessionRevocation,
+        }));
+    }
     api.use("/health", healthRoutes(db, {
         deploymentMode: opts.deploymentMode,
         deploymentExposure: opts.deploymentExposure,
@@ -47,6 +56,7 @@ export function registerApiRoutes(db, opts, pluginRuntime, workspacePreview, cha
     api.use(managedMcpAgentBindingRoutes(db));
     api.use(assetRoutes(db, opts.storageService));
     api.use(projectRoutes(db));
+    api.use(appBuilderRoutes(db));
     api.use(onboardingRoutes(db));
     api.use(issueRoutes(db, opts.storageService));
     api.use(messengerRoutes(db));

package/dist/bootstrap/register-api-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"register-api-routes.js","sourceRoot":"","sources":["../../src/bootstrap/register-api-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAKtE,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,IAAsB,EACtB,aAAgC,EAChC,gBAA6C,EAC7C,qBAA6C;IAE7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IAErB,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CACL,SAAS,EACT,YAAY,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChF,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,EAAE;QACrC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,uBAAuB,IAAI;YAC1C,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;YACjB,uBAAuB,EAAE,EAAE;YAC3B,qBAAqB,EAAE,EAAE;SAC1B;QACD,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG;KACxC,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACjC,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAC7E,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CACL,YAAY,CACV,EAAE,EACF,aAAa,CAAC,MAAM,EACpB,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,EACxE,EAAE,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE,EAC9C,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,EAChD,EAAE,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE,CAC/C,CACF,CAAC;IACF,GAAG,CAAC,GAAG,CACL,YAAY,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CACH,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"register-api-routes.js","sourceRoot":"","sources":["../../src/bootstrap/register-api-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAAE,MAAM,yCAAyC,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAKtE,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,IAAsB,EACtB,aAAgC,EAChC,gBAA6C,EAC7C,qBAA6C;IAE7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;IAErB,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,0BAA0B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,EAAE;YACjC,cAAc,EAAE,IAAI,CAAC,UAAU;YAC/B,cAAc,EAAE,IAAI,CAAC,0BAA0B;YAC/C,iBAAiB,EAAE,IAAI,CAAC,6BAA6B;SACtD,CAAC,CAAC,CAAC;IACN,CAAC;IACD,GAAG,CAAC,GAAG,CACL,SAAS,EACT,YAAY,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CACH,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAChF,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC;IACrC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3B,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IAC9C,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,0BAA0B,CAAC,EAAE,EAAE;QACrC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,uBAAuB,IAAI;YAC1C,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,EAAE;YACjB,uBAAuB,EAAE,EAAE;YAC3B,qBAAqB,EAAE,EAAE;SAC1B;QACD,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG;KACxC,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACjC,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAC7E,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CACL,YAAY,CACV,EAAE,EACF,aAAa,CAAC,MAAM,EACpB,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,EACxE,EAAE,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE,EAC9C,EAAE,cAAc,EAAE,aAAa,CAAC,cAAc,EAAE,EAChD,EAAE,aAAa,EAAE,aAAa,CAAC,aAAa,EAAE,CAC/C,CACF,CAAC;IACF,GAAG,CAAC,GAAG,CACL,YAAY,CAAC,EAAE,EAAE;QACf,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC,CACH,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/bootstrap/types.d.ts

@@ -1,6 +1,8 @@
-import type { DeploymentExposure, DeploymentMode } from "@rudderhq/shared";
+import type { AuthRequirement, DeploymentExposure, DeploymentMode, LocalRuntimeTrust } from "@rudderhq/shared";
 import type { Request, RequestHandler } from "express";
 import type { BetterAuthSessionResult } from "../auth/better-auth.js";
+import type { LocalAccountExchangePolicy } from "../services/local-account-auth.js";
+import type { LocalAccountSessionRevocation } from "../services/local-account-session-revocation.js";
 import type { McpDeploymentAllowlists } from "../services/mcp/security-policy.js";
 import type { StorageService } from "../storage/types.js";
 export type UiMode = "none" | "static" | "vite-dev";
@@ -11,6 +13,10 @@ export interface RudderAppOptions {
     authPublicBaseUrl?: string | null;
     storageService: StorageService;
     deploymentMode: DeploymentMode;
+    /** Independent human-login gate; omitted callers preserve deployment-mode behavior. */
+    authRequirement?: AuthRequirement;
+    /** Independent host capability trust; omitted callers preserve deployment-mode behavior. */
+    localRuntimeTrust?: LocalRuntimeTrust;
     deploymentExposure: DeploymentExposure;
     allowedHostnames: string[];
     bindHost: string;
@@ -32,5 +38,7 @@ export interface RudderAppOptions {
     localPluginDir?: string;
     betterAuthHandler?: RequestHandler;
     resolveSession?: (req: Request) => Promise<BetterAuthSessionResult | null>;
+    localAccountExchangePolicy?: LocalAccountExchangePolicy;
+    localAccountSessionRevocation?: LocalAccountSessionRevocation;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/bootstrap/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/bootstrap/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,sBAAsB,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,cAAc,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;CAC5E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/bootstrap/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AACpF,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,cAAc,CAAC;IAC/B,uFAAuF;IACvF,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,4FAA4F;IAC5F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,sBAAsB,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,8EAA8E;IAC9E,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,cAAc,CAAC;IACnC,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC3E,0BAA0B,CAAC,EAAE,0BAA0B,CAAC;IACxD,6BAA6B,CAAC,EAAE,6BAA6B,CAAC;CAC/D"}

package/dist/bundled-plugins/plugin-linear/dist/worker.js

@@ -5463,7 +5463,7 @@ var FINANCE_UNITS = [
   "train_token",
   "unknown"
 ];
-var BUDGET_SCOPE_TYPES = ["organization", "agent", "project"];
+var BUDGET_SCOPE_TYPES = ["organization", "agent"];
 var BUDGET_METRICS = ["billed_cents"];
 var BUDGET_WINDOW_KINDS = ["calendar_month_utc", "lifetime"];
 var BUDGET_INCIDENT_RESOLUTION_ACTIONS = [
@@ -5633,6 +5633,51 @@ var PLUGIN_STATE_SCOPE_KINDS = [
   "run"
 ];
 
+// ../../../shared/src/validators/app-builder.ts
+var APP_BUILDER_SOURCE_ROOT_PATTERN = /^apps\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var appBuilderBuildStatusSchema = external_exports.enum([
+  "preparing",
+  "building",
+  "verifying",
+  "ready",
+  "failed"
+]);
+var appBuilderRunKindSchema = external_exports.enum(["build", "verification"]);
+var appBuilderSourceRootSchema = external_exports.string().trim().max(68).regex(
+  APP_BUILDER_SOURCE_ROOT_PATTERN,
+  "sourceRoot must be a workspace-relative path in the form apps/<slug>"
+);
+var opaqueLocalIdentifierSchema = external_exports.string().trim().min(1).max(128).regex(/^[A-Za-z0-9_-]+$/, "must be an opaque identifier");
+var createAppBuilderAppSchema = external_exports.object({
+  name: external_exports.string().trim().min(1).max(120),
+  projectId: external_exports.string().uuid().nullable().optional(),
+  conversationId: external_exports.string().uuid().nullable().optional(),
+  sourceRoot: appBuilderSourceRootSchema,
+  scaffoldVersion: external_exports.string().trim().min(1).max(120)
+});
+var updateAppBuilderBuildSchema = external_exports.object({
+  status: appBuilderBuildStatusSchema,
+  expectedStatus: appBuilderBuildStatusSchema.optional(),
+  runId: external_exports.string().uuid().nullable().optional(),
+  runKind: appBuilderRunKindSchema.optional().default("build")
+}).superRefine((value, context) => {
+  if (value.status === "verifying" && value.runKind !== "verification") {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      path: ["runKind"],
+      message: "verifying status requires a verification run"
+    });
+  }
+});
+var attachAppBuilderConversationSchema = external_exports.object({
+  conversationId: external_exports.string().uuid()
+});
+var appBuilderOpaqueBindingSchema = external_exports.object({
+  desktopInstallationId: opaqueLocalIdentifierSchema,
+  appPublicId: opaqueLocalIdentifierSchema,
+  localBindingId: opaqueLocalIdentifierSchema
+});
+
 // ../../../shared/src/website-icons.ts
 var MAX_BROWSER_FAVICON_LENGTH = 65536;
 function imageDataUrl(mimeType, base64) {
@@ -6421,7 +6466,6 @@ var chatInlineAnnotationShape = {
   selectedText: chatInlineAnnotationSelectedTextSchema,
   comment: chatInlineAnnotationCommentSchema,
   sourceConversationId: external_exports.string().uuid(),
-  sourceMessageId: external_exports.string().uuid(),
   sourceHash: chatInlineAnnotationSourceHashSchema,
   start: external_exports.number().int().nonnegative(),
   end: external_exports.number().int().nonnegative(),
@@ -6469,19 +6513,36 @@ function refineChatInlineAnnotation(annotation, ctx) {
 }
 var chatAssistantInlineAnnotationSchema = external_exports.object({
   ...chatInlineAnnotationShape,
-  surface: external_exports.literal("assistant_body")
+  surface: external_exports.literal("assistant_body"),
+  sourceMessageId: external_exports.string().uuid()
 }).strict();
 var chatProcessInlineAnnotationSchema = external_exports.object({
   ...chatInlineAnnotationShape,
   surface: external_exports.literal("process_transcript"),
+  sourceMessageId: external_exports.string().uuid(),
   transcriptKind: external_exports.enum(["thinking", "assistant"]),
   generationId: external_exports.string().uuid(),
   generationSeqStart: external_exports.number().int().nonnegative(),
   generationSeqEnd: external_exports.number().int().nonnegative()
 }).strict();
+var chatWorkspaceFileInlineAnnotationSchema = external_exports.object({
+  ...chatInlineAnnotationShape,
+  surface: external_exports.literal("workspace_file"),
+  sourceFilePath: external_exports.string().min(1).max(4096),
+  sourceLibraryEntryId: external_exports.string().uuid().nullable(),
+  sourceRenderMode: external_exports.enum(["markdown", "text"])
+}).strict();
+var chatLocalFileInlineAnnotationSchema = external_exports.object({
+  ...chatInlineAnnotationShape,
+  surface: external_exports.literal("local_file"),
+  sourceFilePath: external_exports.string().min(1).max(8192),
+  sourceRenderMode: external_exports.enum(["markdown", "text"])
+}).strict();
 var chatInlineAnnotationSchema = external_exports.discriminatedUnion("surface", [
   chatAssistantInlineAnnotationSchema,
-  chatProcessInlineAnnotationSchema
+  chatProcessInlineAnnotationSchema,
+  chatWorkspaceFileInlineAnnotationSchema,
+  chatLocalFileInlineAnnotationSchema
 ]).superRefine(refineChatInlineAnnotation);
 var chatAssistantInlineAnnotationInputSchema = chatAssistantInlineAnnotationSchema.extend({
   attachmentFileIndexes: external_exports.array(external_exports.number().int().nonnegative()).optional()
@@ -6489,9 +6550,17 @@ var chatAssistantInlineAnnotationInputSchema = chatAssistantInlineAnnotationSche
 var chatProcessInlineAnnotationInputSchema = chatProcessInlineAnnotationSchema.extend({
   attachmentFileIndexes: external_exports.array(external_exports.number().int().nonnegative()).optional()
 }).strict();
+var chatWorkspaceFileInlineAnnotationInputSchema = chatWorkspaceFileInlineAnnotationSchema.extend({
+  attachmentFileIndexes: external_exports.array(external_exports.number().int().nonnegative()).optional()
+}).strict();
+var chatLocalFileInlineAnnotationInputSchema = chatLocalFileInlineAnnotationSchema.extend({
+  attachmentFileIndexes: external_exports.array(external_exports.number().int().nonnegative()).optional()
+}).strict();
 var chatInlineAnnotationInputSchema = external_exports.discriminatedUnion("surface", [
   chatAssistantInlineAnnotationInputSchema,
-  chatProcessInlineAnnotationInputSchema
+  chatProcessInlineAnnotationInputSchema,
+  chatWorkspaceFileInlineAnnotationInputSchema,
+  chatLocalFileInlineAnnotationInputSchema
 ]).superRefine(refineChatInlineAnnotation);
 function createChatInlineAnnotationsSchema(annotationSchema) {
   return external_exports.array(annotationSchema).max(MAX_CHAT_INLINE_ANNOTATIONS).superRefine((annotations, ctx) => {
@@ -6515,6 +6584,7 @@ function createChatInlineAnnotationsSchema(annotationSchema) {
       const sourceRangeKey = JSON.stringify([
         annotation.sourceConversationId,
         annotation.sourceMessageId,
+        annotation.sourceFilePath,
         annotation.surface,
         annotation.surface === "process_transcript" ? annotation.transcriptKind : null,
         annotation.surface === "process_transcript" ? annotation.generationId : null,
@@ -7051,6 +7121,27 @@ var listMessengerSavedViewsQuerySchema = external_exports.object({
   primaryRailPinned: external_exports.union([external_exports.literal("true"), external_exports.literal(true)]).transform(() => true).optional()
 }).strict();
 
+// ../../../shared/src/validators/local-account-auth.ts
+var localServerExchangeSchema = external_exports.object({
+  exchangeCode: external_exports.string().min(16).max(16384)
+}).strict();
+var localOfflineGrantSchema = external_exports.object({
+  grant: external_exports.string().min(32).max(32768),
+  devicePublicKeySpki: external_exports.string().min(32).max(4096),
+  proof: external_exports.object({
+    payload: external_exports.object({
+      version: external_exports.literal(1),
+      grantHash: external_exports.string().min(16).max(128),
+      method: external_exports.string().min(1).max(16),
+      path: external_exports.string().min(1).max(2048),
+      bodyHash: external_exports.string().min(1).max(128),
+      nonce: external_exports.string().min(16).max(256),
+      issuedAtMs: external_exports.number().int().safe()
+    }).strict(),
+    signature: external_exports.string().min(16).max(1024)
+  }).strict()
+}).strict();
+
 // ../../../shared/src/validators/instance.ts
 var DEFAULT_INSTANCE_BROWSER_SETTINGS = {
   enabled: true,
@@ -7068,6 +7159,7 @@ var instanceLocaleSchema = external_exports.enum(["en", "zh-CN"]);
 var instanceGeneralSettingsSchema = external_exports.object({
   censorUsernameInLogs: external_exports.boolean().default(false),
   showDeveloperDiagnostics: external_exports.boolean().default(false),
+  experimentalSitesEnabled: external_exports.boolean().default(false),
   locale: instanceLocaleSchema.default("en")
 }).strict();
 var patchInstanceGeneralSettingsSchema = instanceGeneralSettingsSchema.partial();
@@ -9083,6 +9175,7 @@ var API = {
 
 // ../../../shared/src/organization-skill-reference.ts
 var RUDDER_BUNDLED_SKILL_SLUGS = [
+  "app-builder",
   "para-memory-files",
   "rudder-docs",
   "skill-creator",