@sapiom/harness 0.0.0 → 0.1.0

package/dist/server/rest.js

@@ -0,0 +1,235 @@
+/**
+ * REST surface under /api — see src/shared/types.ts for the full contract
+ * table. This router covers the session-lifecycle endpoints (W1); workflows,
+ * macros and settings are mounted by other workstreams alongside this one.
+ */
+import express, { Router } from "express";
+import { z } from "zod";
+import { SessionNotReadyError } from "../core/session-manager.js";
+import { loadSettings, saveSettings } from "../cli/settings.js";
+const createSessionSchema = z.object({
+    cwd: z.string().min(1),
+    harness: z.enum(["claude-code", "codex"]),
+    profile: z.string().optional(),
+});
+const injectInputSchema = z.object({
+    text: z.string(),
+    submit: z.boolean().optional(),
+});
+const bindWorkflowSchema = z.object({
+    workflowPath: z.string().min(1).nullable(),
+});
+const settingsPatchSchema = z.object({
+    telemetryOptIn: z.boolean().optional(),
+    recentDirs: z.array(z.string()).optional(),
+});
+export function createRestRouter(options) {
+    const { sessionManager, adapters, version, identity, listWorkflows, listMacros } = options;
+    const router = Router();
+    router.use(express.json());
+    router.get("/state", async (_req, res, next) => {
+        try {
+            const settings = await loadSettings(options.settingsPath);
+            const state = {
+                version,
+                authenticated: identity !== null,
+                userId: identity?.userId ?? null,
+                organizationName: identity?.organizationName ?? null,
+                telemetryOptIn: settings.telemetryOptIn,
+                sessions: sessionManager.list(),
+                workflows: await listWorkflows(),
+                macros: listMacros(),
+                launchDir: options.launchDir,
+                ...(options.availableHarnesses ? { availableHarnesses: options.availableHarnesses } : {}),
+                ...(options.listTasks ? { tasks: options.listTasks() } : {}),
+                ...(options.firstRun !== undefined ? { firstRun: options.firstRun } : {}),
+            };
+            res.json(state);
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.get("/settings", async (_req, res, next) => {
+        try {
+            res.json(await loadSettings(options.settingsPath));
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.patch("/settings", async (req, res, next) => {
+        const parsed = settingsPatchSchema.safeParse(req.body);
+        if (!parsed.success) {
+            res.status(400).json({ error: parsed.error.message });
+            return;
+        }
+        try {
+            const current = await loadSettings(options.settingsPath);
+            const updated = { ...current, ...parsed.data };
+            await saveSettings(updated, options.settingsPath);
+            if (parsed.data.telemetryOptIn !== undefined &&
+                parsed.data.telemetryOptIn !== current.telemetryOptIn) {
+                options.onTelemetryOptInChange?.(parsed.data.telemetryOptIn);
+            }
+            res.json(updated);
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    // Deliberately does NOT create a session itself — the SPA follows up with
+    // its normal POST /sessions against the returned root, so recent-dirs
+    // bookkeeping, workflow scanning, and tab state all flow through the one
+    // existing session-creation path.
+    router.post("/sample-project", async (_req, res, next) => {
+        if (!options.seedSampleProject) {
+            res.status(501).json({ error: "sample project seeding is not available on this server" });
+            return;
+        }
+        try {
+            res.json(await options.seedSampleProject());
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.post("/sessions", async (req, res, next) => {
+        const parsed = createSessionSchema.safeParse(req.body);
+        if (!parsed.success) {
+            res.status(400).json({ error: parsed.error.message });
+            return;
+        }
+        try {
+            // sessionManager.create() writes the initial harness-context.json
+            // itself (before spawning) so every entry point gets it, not just
+            // this REST route — see SessionManager.create().
+            const session = await sessionManager.create(parsed.data);
+            res.status(201).json(session);
+            options.onSessionCreated?.(parsed.data.cwd, session.id);
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.patch("/sessions/:id/workflow", async (req, res, next) => {
+        const parsed = bindWorkflowSchema.safeParse(req.body);
+        if (!parsed.success) {
+            res.status(400).json({ error: parsed.error.message });
+            return;
+        }
+        const session = sessionManager.get(req.params.id);
+        if (!session) {
+            res.status(404).json({ error: "session not found" });
+            return;
+        }
+        const { workflowPath } = parsed.data;
+        if (workflowPath !== null && !options.findWorkflow(workflowPath)) {
+            res.status(400).json({
+                error: `Unknown workflow path '${workflowPath}' — scan or connect it before binding a session to it`,
+            });
+            return;
+        }
+        try {
+            sessionManager.setBoundWorkflowPath(req.params.id, workflowPath);
+            // setBoundWorkflowPath() mutates the same session object in place, so
+            // `session` here already reflects the new boundWorkflowPath — the
+            // callee resolves it against the live registry itself.
+            await options.writeWorkspaceContext(session);
+            await (options.renderCanvas ?? (async () => { }))(session);
+            res.json(sessionManager.get(req.params.id));
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.get("/sessions", (_req, res) => {
+        res.json(sessionManager.list());
+    });
+    router.get("/sessions/history", async (req, res, next) => {
+        const cwd = typeof req.query.cwd === "string" ? req.query.cwd : undefined;
+        if (!cwd) {
+            res.status(400).json({ error: "cwd query param is required" });
+            return;
+        }
+        try {
+            // Registry entries win over transcript-scanned history for the same
+            // agent session — they carry live status the transcript can't know.
+            const byAgentSessionId = new Map();
+            for (const session of sessionManager.list()) {
+                if (session.cwd !== cwd || !session.agentSessionId)
+                    continue;
+                byAgentSessionId.set(session.agentSessionId, {
+                    harnessSessionId: session.id,
+                    agentSessionId: session.agentSessionId,
+                    harness: session.harness,
+                    cwd: session.cwd,
+                    title: session.title,
+                    lastActiveAt: session.lastActiveAt,
+                    source: "registry",
+                });
+            }
+            for (const adapter of Object.values(adapters)) {
+                if (!adapter)
+                    continue;
+                for (const summary of await adapter.listPastSessions(cwd)) {
+                    if (!byAgentSessionId.has(summary.agentSessionId)) {
+                        byAgentSessionId.set(summary.agentSessionId, summary);
+                    }
+                }
+            }
+            const merged = Array.from(byAgentSessionId.values()).sort((a, b) => a.lastActiveAt < b.lastActiveAt ? 1 : -1);
+            res.json(merged);
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.post("/sessions/:id/resume", async (req, res, next) => {
+        try {
+            const session = await sessionManager.resume(req.params.id);
+            res.json(session);
+        }
+        catch (err) {
+            if (err instanceof Error && err.message.startsWith("Unknown session")) {
+                res.status(404).json({ error: err.message });
+                return;
+            }
+            next(err);
+        }
+    });
+    router.delete("/sessions/:id", (req, res) => {
+        const existed = sessionManager.get(req.params.id) !== undefined;
+        if (!existed) {
+            res.status(404).json({ error: "session not found" });
+            return;
+        }
+        sessionManager.kill(req.params.id);
+        res.json({ ok: true });
+    });
+    router.post("/sessions/:id/input", async (req, res, next) => {
+        const parsed = injectInputSchema.safeParse(req.body);
+        if (!parsed.success) {
+            res.status(400).json({ error: parsed.error.message });
+            return;
+        }
+        try {
+            const submit = parsed.data.submit ?? true;
+            const ok = await sessionManager.submitInput(req.params.id, parsed.data.text, submit);
+            if (!ok) {
+                res.status(404).json({ error: "session not found or has no live pty" });
+                return;
+            }
+            res.json({ ok: true });
+        }
+        catch (err) {
+            if (err instanceof SessionNotReadyError) {
+                res.status(409).json({ error: err.message });
+                return;
+            }
+            next(err);
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=rest.js.map

package/dist/server/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../src/server/rest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB,OAAO,EAAE,oBAAoB,EAAuB,MAAM,4BAA4B,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAA2C,CAAC;AAE7C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAyC,CAAC;AAE3C,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAA0C,CAAC;AAE5C,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAA+C,CAAC;AAiEjD,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAE3B,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAa;gBACtB,OAAO;gBACP,aAAa,EAAE,QAAQ,KAAK,IAAI;gBAChC,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,IAAI;gBAChC,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB,IAAI,IAAI;gBACpD,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,QAAQ,EAAE,cAAc,CAAC,IAAI,EAAE;gBAC/B,SAAS,EAAE,MAAM,aAAa,EAAE;gBAChC,MAAM,EAAE,UAAU,EAAE;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAChD,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,OAAO,GAAoB,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAChE,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;YAClD,IACE,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS;gBACxC,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EACrD,CAAC;gBACD,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC/D,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,sEAAsE;IACtE,yEAAyE;IACzE,kCAAkC;IAClC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvD,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,kEAAkE;YAClE,kEAAkE;YAClE,iDAAiD;YACjD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,OAAO,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QACrC,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,0BAA0B,YAAY,uDAAuD;aACrG,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,cAAc,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;YACjE,sEAAsE;YACtE,kEAAkE;YAClE,uDAAuD;YACvD,MAAM,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC1D,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACpC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACvD,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;YAC3D,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC5C,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc;oBAAE,SAAS;gBAC7D,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE;oBAC3C,gBAAgB,EAAE,OAAO,CAAC,EAAE;oBAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;oBACtC,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,KAAK,MAAM,OAAO,IAAI,MAAM,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;wBAClD,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;YACH,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACjE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;QAChE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;YAC1C,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACrF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/static.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Serves the built Vite SPA from dist/web. Falls back to a placeholder page
+ * when the web bundle hasn't been built yet (e.g. `pnpm dev` without a prior
+ * `pnpm build:web`), so the server is still useful for API/WS-only testing.
+ */
+import { Router } from "express";
+export declare function createStaticRouter(webDir: string): Router;
+//# sourceMappingURL=static.d.ts.map

package/dist/server/static.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.d.ts","sourceRoot":"","sources":["../../src/server/static.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAgB,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAc1C,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAgBzD"}

package/dist/server/static.js

@@ -0,0 +1,36 @@
+/**
+ * Serves the built Vite SPA from dist/web. Falls back to a placeholder page
+ * when the web bundle hasn't been built yet (e.g. `pnpm dev` without a prior
+ * `pnpm build:web`), so the server is still useful for API/WS-only testing.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import express, { Router } from "express";
+const PLACEHOLDER_HTML = `<!doctype html>
+<html>
+  <head><meta charset="utf-8"><title>Sapiom Harness</title></head>
+  <body style="font: 14px system-ui; padding: 2rem; color: #333;">
+    <h1>Sapiom Harness</h1>
+    <p>The web app hasn't been built yet. Run <code>pnpm --filter @sapiom/harness build:web</code>,
+    or use <code>pnpm --filter @sapiom/harness dev:web</code> for a hot-reloading dev server.</p>
+    <p>The API and WebSocket endpoints on this port are live.</p>
+  </body>
+</html>
+`;
+export function createStaticRouter(webDir) {
+    const router = Router();
+    const indexPath = join(webDir, "index.html");
+    if (existsSync(indexPath)) {
+        router.use(express.static(webDir));
+        router.get("*", (_req, res) => {
+            res.sendFile(indexPath);
+        });
+    }
+    else {
+        router.get("*", (_req, res) => {
+            res.status(200).set("Content-Type", "text/html").send(PLACEHOLDER_HTML);
+        });
+    }
+    return router;
+}
+//# sourceMappingURL=static.js.map

package/dist/server/static.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static.js","sourceRoot":"","sources":["../../src/server/static.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAE1C,MAAM,gBAAgB,GAAG;;;;;;;;;;CAUxB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAE7C,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;YAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/terminal-ws.d.ts

@@ -0,0 +1,9 @@
+/**
+ * /ws/terminal?session=&token= — raw pty bytes both ways, JSON {type:"resize"}
+ * control frames from client to server. See src/shared/types.ts for the protocol.
+ */
+import type { IncomingMessage } from "node:http";
+import type { WebSocket } from "ws";
+import type { SessionManager } from "../core/session-manager.js";
+export declare function createTerminalWebSocketHandler(sessionManager: SessionManager, bootToken: string): (ws: WebSocket, _req: IncomingMessage, params: URLSearchParams) => void;
+//# sourceMappingURL=terminal-ws.d.ts.map

package/dist/server/terminal-ws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-ws.d.ts","sourceRoot":"","sources":["../../src/server/terminal-ws.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAEpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAiBjE,wBAAgB,8BAA8B,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,IACtF,IAAI,SAAS,EAAE,MAAM,eAAe,EAAE,QAAQ,eAAe,KAAG,IAAI,CAwC7E"}

package/dist/server/terminal-ws.js

@@ -0,0 +1,59 @@
+/**
+ * /ws/terminal?session=&token= — raw pty bytes both ways, JSON {type:"resize"}
+ * control frames from client to server. See src/shared/types.ts for the protocol.
+ */
+import { timingSafeEqualString } from "./auth.js";
+function parseControlMessage(text) {
+    if (!text.startsWith("{"))
+        return undefined;
+    try {
+        const parsed = JSON.parse(text);
+        if (parsed.type === "resize" && typeof parsed.cols === "number" && typeof parsed.rows === "number") {
+            return { type: "resize", cols: parsed.cols, rows: parsed.rows };
+        }
+    }
+    catch {
+        // Not JSON — treat as raw terminal input.
+    }
+    return undefined;
+}
+export function createTerminalWebSocketHandler(sessionManager, bootToken) {
+    return (ws, _req, params) => {
+        const sessionId = params.get("session");
+        const token = params.get("token") ?? "";
+        if (!timingSafeEqualString(token, bootToken)) {
+            ws.close(4001, "unauthorized");
+            return;
+        }
+        if (!sessionId) {
+            ws.close(4008, "missing session parameter");
+            return;
+        }
+        if (!sessionManager.get(sessionId)) {
+            ws.close(4004, "session not found");
+            return;
+        }
+        const detach = sessionManager.attach(sessionId, (chunk) => {
+            if (ws.readyState === ws.OPEN)
+                ws.send(chunk);
+        });
+        if (!detach) {
+            ws.close(4004, "session has no live pty");
+            return;
+        }
+        ws.on("message", (data, isBinary) => {
+            const text = data.toString("utf8");
+            if (!isBinary) {
+                const control = parseControlMessage(text);
+                if (control) {
+                    sessionManager.resize(sessionId, control.cols, control.rows);
+                    return;
+                }
+            }
+            sessionManager.write(sessionId, text);
+        });
+        ws.on("close", () => detach());
+        ws.on("error", () => detach());
+    };
+}
+//# sourceMappingURL=terminal-ws.js.map

package/dist/server/terminal-ws.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-ws.js","sourceRoot":"","sources":["../../src/server/terminal-ws.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAElD,SAAS,mBAAmB,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoC,CAAC;QACnE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,cAA8B,EAAE,SAAiB;IAC9F,OAAO,CAAC,EAAa,EAAE,IAAqB,EAAE,MAAuB,EAAQ,EAAE;QAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAExC,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YAC7C,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACxD,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;gBAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,OAAO,EAAE,CAAC;oBACZ,cAAc,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC7D,OAAO;gBACT,CAAC;YACH,CAAC;YACD,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/B,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/ws-router.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Minimal path-based router for WS upgrades on a shared HTTP server. `ws`
+ * doesn't dispatch by path across multiple WebSocketServer instances on its
+ * own when they're all attached with `noServer: true`, so this wires the
+ * single `upgrade` event to the right one.
+ */
+import type { Server as HttpServer } from "node:http";
+import type { IncomingMessage } from "node:http";
+import type { WebSocket, WebSocketServer } from "ws";
+export interface WebSocketRoute {
+    path: string;
+    wss: WebSocketServer;
+    onConnection: (ws: WebSocket, req: IncomingMessage, params: URLSearchParams) => void;
+}
+export declare function attachWebSocketRouters(server: HttpServer, routes: WebSocketRoute[]): void;
+//# sourceMappingURL=ws-router.d.ts.map

package/dist/server/ws-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-router.d.ts","sourceRoot":"","sources":["../../src/server/ws-router.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,eAAe,CAAC;IACrB,YAAY,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;CACtF;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAmBzF"}

package/dist/server/ws-router.js

@@ -0,0 +1,26 @@
+/**
+ * Minimal path-based router for WS upgrades on a shared HTTP server. `ws`
+ * doesn't dispatch by path across multiple WebSocketServer instances on its
+ * own when they're all attached with `noServer: true`, so this wires the
+ * single `upgrade` event to the right one.
+ */
+export function attachWebSocketRouters(server, routes) {
+    server.on("upgrade", (req, socket, head) => {
+        const url = new URL(req.url ?? "/", "http://localhost");
+        const route = routes.find((r) => r.path === url.pathname);
+        if (!route) {
+            socket.destroy();
+            return;
+        }
+        route.wss.handleUpgrade(req, socket, head, (ws) => {
+            route.wss.emit("connection", ws, req);
+        });
+    });
+    for (const route of routes) {
+        route.wss.on("connection", (ws, req) => {
+            const url = new URL(req.url ?? "/", "http://localhost");
+            route.onConnection(ws, req, url.searchParams);
+        });
+    }
+}
+//# sourceMappingURL=ws-router.js.map

package/dist/server/ws-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-router.js","sourceRoot":"","sources":["../../src/server/ws-router.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAYH,MAAM,UAAU,sBAAsB,CAAC,MAAkB,EAAE,MAAwB;IACjF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE;YAChD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,EAAa,EAAE,GAAoB,EAAE,EAAE;YACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YACxD,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}