@schlessera/brain-ui-server 0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Alain Schlesser
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,65 @@
+# @schlessera/brain-ui-server
+
+The brain-kit chat-UI backend as a library: a Hono app factory that serves the
+REST API, the authenticated WebSocket, and the agent turn coordinator. The
+deployment shell owns the process — port, `Bun.serve()` wiring, SIGTERM, the
+built client bundle, and the optional PNG/PDF renderer — and injects those
+pieces through `createApp()`.
+
+**Bun-only** (`bun:sqlite`, `hono/bun`). See `engines`.
+
+## Usage
+
+```ts
+import { createApp, cancelActiveTurn, closeDb } from "@schlessera/brain-ui-server";
+
+const app = createApp({
+  staticRoot: "./client/dist",        // optional: serve a built SPA + fallback
+  renderer,                           // optional: { renderPng, renderPdf }
+  appName: "Brain UI",                // branding in status copy
+  dbPath: process.env.DB_PATH,        // session/passkey SQLite (default ./brain-ui.db)
+});
+
+export default {
+  port: 3000,
+  fetch: app.fetch,
+  websocket: app.websocket,
+};
+```
+
+One app per process: `createApp()` configures a process-wide host (WebSocket
+coordinator, SQLite handle, backend registry) — calling it twice with
+different options reconfigures the first app rather than creating a second.
+
+## What it owns
+
+- **`createApp(options)`** — route mounting order, CORS (split topology via
+  `ALLOWED_ORIGINS`), the auth guard, and the `/ws` upgrade (CSWSH origin check
+  + cookie/IP auth). Refuses to boot on an unsafe auth configuration.
+- **Auth** (`AUTH_MODE`): `password` (+ passkeys/WebAuthn), `tailscale`,
+  `proxy`, `none` (loopback-only unless explicitly overridden).
+- **WebSocket turn coordinator** — parallel sessions with per-session turn
+  slots, follow-up queueing, host-owned per-turn timeout/cancellation, and the
+  approval / ask-user / location round-trips. Decomposed into explicit host
+  objects (`WsHost`, `TurnCoordinator`, `SessionCatalog`) under `src/ws/`.
+- **Session catalog** — SQLite (WAL) with bundled migrations, applied on first
+  open.
+- **Brain routes** — search/briefing/stats/list/add plus SSE sync/whatsup,
+  spawning the `brain` CLI from `BRAIN_PATH`.
+- **Voice** — Deepgram token minting and keyterm-cache building from the brain
+  index.
+- **Render seam** — `POST /api/render` answers 501 unless the deployment
+  injects a renderer (see `@schlessera/brain-render-puppeteer`).
+
+## Environment
+
+The package reads the same env contract the brain-ui deployment documents:
+`AUTH_MODE`, `BRAIN_UI_PASSWORD_HASH`, `COOKIE_SECRET`, `TRUST_PROXY`,
+`WEBAUTHN_*`, `BRAIN_PATH`, `DB_PATH`, `AGENT_BACKEND`,
+`BRAIN_UI_CLAUDE_PROFILES`, `MAX_CONCURRENT_SESSIONS`, `DEEPGRAM_API_KEY`,
+`VOICE_*`, `NOMINATIM_*`, `ALLOWED_ORIGINS`. `createApp()` options win over
+env where both exist.
+
+## Versioning
+
+Versions in lockstep with all `@schlessera/brain-*` packages.

package/dist/agent/backend.d.ts

@@ -0,0 +1,30 @@
+import type { ProviderInfo } from "@schlessera/brain-ui-sdk";
+import type { AgentBackend, BackendCapabilities } from "@schlessera/brain-ui-sdk/server";
+/** All configured backends, with the default backend first. */
+export declare function getBackends(): Promise<AgentBackend[]>;
+/** Find a configured backend by its stable id. */
+export declare function getBackendById(id: string): Promise<AgentBackend | undefined>;
+/** The default backend used for new and legacy sessions. */
+export declare function getDefaultBackend(): Promise<AgentBackend>;
+/** The stable id of the default backend. */
+export declare function getDefaultBackendId(): Promise<string>;
+/** Resolve the backend that owns a globally unique profile id. */
+export declare function getBackendForProfile(profileId: string): Promise<AgentBackend | undefined>;
+/** Resolve a persisted backend id, falling back for legacy/unknown sessions. */
+export declare function getBackendForSession(backendId: string | null | undefined): Promise<AgentBackend>;
+/** List every available profile, tagged with its owning backend id. */
+export declare function listAllProviders(): Promise<ProviderInfo[]>;
+/** Per-backend capability metadata exposed by the providers route. */
+export declare function getBackendsInfo(): Promise<Record<string, {
+    id: string;
+    capabilities: BackendCapabilities;
+}>>;
+/** @deprecated Use getDefaultBackend() or a routing-specific accessor. */
+export declare function getBackend(): Promise<AgentBackend>;
+/** Test seam: drop the cached registry so later access rebuilds from env. */
+export declare function resetBackendForTests(): void;
+/** Test seam: install one fake backend as the complete registry. */
+export declare function setBackendForTests(backend: AgentBackend): void;
+/** Test seam: install a complete fake registry with an explicit default. */
+export declare function setBackendsForTests(backends: AgentBackend[], defaultBackendId?: string): void;
+//# sourceMappingURL=backend.d.ts.map

package/dist/agent/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/agent/backend.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EACV,YAAY,EACZ,mBAAmB,EACpB,MAAM,iCAAiC,CAAC;AAkHzC,+DAA+D;AAC/D,wBAAsB,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAE3D;AAED,kDAAkD;AAClD,wBAAsB,cAAc,CAClC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAEnC;AAED,4DAA4D;AAC5D,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,YAAY,CAAC,CAG/D;AAED,4CAA4C;AAC5C,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAE3D;AAED,kEAAkE;AAClE,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAInC;AAED,gFAAgF;AAChF,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACnC,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED,uEAAuE;AACvE,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAQhE;AAED,sEAAsE;AACtE,wBAAsB,eAAe,IAAI,OAAO,CAC9C,MAAM,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAClE,CAQA;AAED,0EAA0E;AAC1E,wBAAsB,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,CAExD;AAED,6EAA6E;AAC7E,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAE9D;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EAAE,EACxB,gBAAgB,SAAwB,GACvC,IAAI,CAEN"}

package/dist/agent/backend.js

@@ -0,0 +1,226 @@
+import { createRequire } from "module";
+import { createClaudeBackend, defineProfiles, } from "@schlessera/brain-backend-claude";
+/**
+ * Backend registry for the deployment. Claude is always available.
+ * `AGENT_BACKEND=pi` retains the legacy single-backend deployment mode when the
+ * optional pi package is installed.
+ *
+ * The old five hardcoded personal inference profiles are gone: the Claude
+ * backend ships the single "claude" default, and additional Anthropic-compatible
+ * endpoints are declared via the BRAIN_UI_CLAUDE_PROFILES env var (documented in
+ * .env.example) rather than in code.
+ */
+const BRAIN_PATH = process.env.BRAIN_PATH || `${process.env.HOME || "/root"}/brain`;
+// The Claude Code native binary is not in node_modules — it is installed via
+// the official curl-bash installer (~/.local/bin/claude, symlinked to
+// /usr/local/bin/claude in the container). The Agent SDK can't always
+// auto-discover it, so hand it the explicit path; override with CLAUDE_CODE_PATH.
+const CLAUDE_CODE_PATH = process.env.CLAUDE_CODE_PATH || "/usr/local/bin/claude";
+let cachedRegistry = null;
+async function createRegistry(backends, defaultBackendId) {
+    if (backends.length === 0) {
+        throw new Error("Backend registry requires at least one backend.");
+    }
+    const byId = new Map(backends.map((backend) => [backend.id, backend]));
+    const resolvedDefaultId = byId.has(defaultBackendId)
+        ? defaultBackendId
+        : backends[0].id;
+    const ordered = [
+        byId.get(resolvedDefaultId),
+        ...backends.filter((backend) => backend.id !== resolvedDefaultId),
+    ];
+    const listedProfiles = await Promise.all(ordered.map(async (backend) => ({
+        backend,
+        profiles: await backend.listProfiles(),
+    })));
+    const profileOwners = new Map();
+    const profiles = new Map();
+    for (const listed of listedProfiles) {
+        profiles.set(listed.backend.id, listed.profiles);
+        for (const profile of listed.profiles) {
+            const owner = profileOwners.get(profile.id);
+            if (owner && owner !== listed.backend.id) {
+                throw new Error(`Profile id collision across backends: "${profile.id}" is exposed by "${owner}" and "${listed.backend.id}".`);
+            }
+            profileOwners.set(profile.id, listed.backend.id);
+        }
+    }
+    return {
+        backends: ordered,
+        byId,
+        defaultBackendId: resolvedDefaultId,
+        profileOwners,
+        profiles,
+    };
+}
+async function buildRegistry() {
+    const primary = (process.env.AGENT_BACKEND || "claude")
+        .trim()
+        .toLowerCase();
+    if (primary === "pi") {
+        const pi = buildPiBackend();
+        return createRegistry([pi], pi.id);
+    }
+    const claude = createClaudeBackend({
+        brainPath: BRAIN_PATH,
+        claudeCodePath: CLAUDE_CODE_PATH,
+        profiles: loadClaudeProfiles(),
+    });
+    const backends = [claude];
+    // AGENT_BACKEND must name a configured backend. The in-process options are
+    // "claude" (default) and "pi" (handled above). An unrecognized value is a
+    // misconfiguration — fail loudly instead of silently coercing to claude and
+    // running on the wrong backend with nothing in the logs.
+    if (process.env.AGENT_BACKEND && !backends.some((b) => b.id === primary)) {
+        throw new Error(`AGENT_BACKEND="${primary}" does not match any configured backend ` +
+            `(expected "claude" or "pi").`);
+    }
+    return createRegistry(backends, primary);
+}
+async function getRegistry() {
+    if (!cachedRegistry)
+        cachedRegistry = buildRegistry();
+    return cachedRegistry;
+}
+/** All configured backends, with the default backend first. */
+export async function getBackends() {
+    return (await getRegistry()).backends;
+}
+/** Find a configured backend by its stable id. */
+export async function getBackendById(id) {
+    return (await getRegistry()).byId.get(id);
+}
+/** The default backend used for new and legacy sessions. */
+export async function getDefaultBackend() {
+    const registry = await getRegistry();
+    return registry.byId.get(registry.defaultBackendId);
+}
+/** The stable id of the default backend. */
+export async function getDefaultBackendId() {
+    return (await getRegistry()).defaultBackendId;
+}
+/** Resolve the backend that owns a globally unique profile id. */
+export async function getBackendForProfile(profileId) {
+    const registry = await getRegistry();
+    const backendId = registry.profileOwners.get(profileId);
+    return backendId ? registry.byId.get(backendId) : undefined;
+}
+/** Resolve a persisted backend id, falling back for legacy/unknown sessions. */
+export async function getBackendForSession(backendId) {
+    if (backendId) {
+        const backend = await getBackendById(backendId);
+        if (backend)
+            return backend;
+    }
+    return getDefaultBackend();
+}
+/** List every available profile, tagged with its owning backend id. */
+export async function listAllProviders() {
+    const registry = await getRegistry();
+    return registry.backends.flatMap((backend) => (registry.profiles.get(backend.id) ?? []).map((profile) => ({
+        ...profile,
+        backendId: backend.id,
+    })));
+}
+/** Per-backend capability metadata exposed by the providers route. */
+export async function getBackendsInfo() {
+    const backends = await getBackends();
+    return Object.fromEntries(backends.map((backend) => [
+        backend.id,
+        { id: backend.id, capabilities: backend.capabilities },
+    ]));
+}
+/** @deprecated Use getDefaultBackend() or a routing-specific accessor. */
+export async function getBackend() {
+    return getDefaultBackend();
+}
+/** Test seam: drop the cached registry so later access rebuilds from env. */
+export function resetBackendForTests() {
+    cachedRegistry = null;
+}
+/** Test seam: install one fake backend as the complete registry. */
+export function setBackendForTests(backend) {
+    cachedRegistry = createRegistry([backend], backend.id);
+}
+/** Test seam: install a complete fake registry with an explicit default. */
+export function setBackendsForTests(backends, defaultBackendId = backends[0]?.id ?? "") {
+    cachedRegistry = createRegistry(backends, defaultBackendId);
+}
+// The built-in default profile's model. The Claude backend historically pinned
+// the default to a specific model; after the SDK extraction the pin was lost and
+// resumed default-profile sessions drifted to "whatever the CLI defaults to",
+// silently changing model/behaviour/billing on every CLI bump. Re-pin it here
+// (a committed default, overridable per deploy via BRAIN_UI_CLAUDE_DEFAULT_MODEL)
+// so the default stays on a known model.
+const BUILTIN_DEFAULT_MODEL = process.env.BRAIN_UI_CLAUDE_DEFAULT_MODEL?.trim() || "claude-sonnet-4-6";
+function builtinDefaultProfiles() {
+    return defineProfiles([
+        {
+            id: "claude",
+            label: "Claude",
+            vendor: "anthropic",
+            model: BUILTIN_DEFAULT_MODEL,
+            modelAliases: true,
+        },
+    ]);
+}
+/**
+ * The Claude roster: the pinned built-in "claude" default first, plus any extra
+ * profiles from BRAIN_UI_CLAUDE_PROFILES (a JSON array of InferenceProfileInput
+ * {id,label,model?,baseUrl?,authTokenEnv?,apiKeyEnv?,modelAliases?}).
+ *
+ * A malformed or duplicate-id roster THROWS — caught at boot by the registry
+ * fail-fast — rather than silently degrading to default-only and rebilling
+ * every pinned session to the subscription with nothing in the logs.
+ */
+function loadClaudeProfiles() {
+    const base = builtinDefaultProfiles();
+    const raw = process.env.BRAIN_UI_CLAUDE_PROFILES?.trim();
+    if (!raw)
+        return base;
+    let inputs;
+    try {
+        inputs = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`BRAIN_UI_CLAUDE_PROFILES is not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!Array.isArray(inputs)) {
+        throw new Error("BRAIN_UI_CLAUDE_PROFILES must be a JSON array.");
+    }
+    // Reject duplicate ids (including collisions with the built-in "claude"): a
+    // duplicate silently shadows and can resolve to the wrong credentials.
+    const seen = new Set(base.map((profile) => profile.id));
+    for (const input of inputs) {
+        if (!input || typeof input.id !== "string" || input.id.length === 0) {
+            throw new Error("Each BRAIN_UI_CLAUDE_PROFILES entry needs a non-empty string id.");
+        }
+        if (seen.has(input.id)) {
+            throw new Error(`Duplicate profile id in BRAIN_UI_CLAUDE_PROFILES: "${input.id}".`);
+        }
+        seen.add(input.id);
+    }
+    return [...base, ...defineProfiles(inputs)];
+}
+/**
+ * Optional pi backend. @schlessera/brain-backend-pi is NOT a hard dependency — a
+ * deployment that never opts into it does not need it (or its pi SDK peer deps)
+ * installed. Loaded lazily so the server still boots without it; when requested
+ * but absent, fail with an actionable message.
+ */
+function buildPiBackend() {
+    const require = createRequire(import.meta.url);
+    let mod;
+    try {
+        mod = require("@schlessera/brain-backend-pi");
+    }
+    catch {
+        throw new Error('AGENT_BACKEND=pi but "@schlessera/brain-backend-pi" is not installed. ' +
+            "Add it (with its pi SDK dependencies) or set AGENT_BACKEND=claude.");
+    }
+    if (typeof mod.createPiBackend !== "function") {
+        throw new Error('"@schlessera/brain-backend-pi" does not export createPiBackend.');
+    }
+    return mod.createPiBackend({ brainPath: BRAIN_PATH });
+}
+//# sourceMappingURL=backend.js.map

package/dist/agent/backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../src/agent/backend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EACL,mBAAmB,EACnB,cAAc,GAGf,MAAM,kCAAkC,CAAC;AAO1C;;;;;;;;;GASG;AAEH,MAAM,UAAU,GACd,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC;AAEnE,6EAA6E;AAC7E,sEAAsE;AACtE,sEAAsE;AACtE,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;AAUjF,IAAI,cAAc,GAAoC,IAAI,CAAC;AAE3D,KAAK,UAAU,cAAc,CAC3B,QAAwB,EACxB,gBAAwB;IAExB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAClD,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnB,MAAM,OAAO,GAAG;QACd,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAE;QAC5B,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,iBAAiB,CAAC;KAClE,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9B,OAAO;QACP,QAAQ,EAAE,MAAM,OAAO,CAAC,YAAY,EAAE;KACvC,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEnD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,KAAK,IAAI,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,CAAC,EAAE,oBAAoB,KAAK,UAAU,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAC7G,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,IAAI;QACJ,gBAAgB,EAAE,iBAAiB;QACnC,aAAa;QACb,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC;SACpD,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;IAEjB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QAC5B,OAAO,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC;QACjC,SAAS,EAAE,UAAU;QACrB,cAAc,EAAE,gBAAgB;QAChC,QAAQ,EAAE,kBAAkB,EAAE;KAC/B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,CAAC;IAE1B,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,0CAA0C;YACjE,8BAA8B,CACjC,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,cAAc;QAAE,cAAc,GAAG,aAAa,EAAE,CAAC;IACtD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,OAAO,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC;AACxC,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAU;IAEV,OAAO,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAE,CAAC;AACvD,CAAC;AAED,4CAA4C;AAC5C,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,gBAAgB,CAAC;AAChD,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAoC;IAEpC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC3C,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC1D,GAAG,OAAO;QACV,SAAS,EAAE,OAAO,CAAC,EAAE;KACtB,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,eAAe;IAGnC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,WAAW,CACvB,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,EAAE;QACV,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;KACvD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,OAAO,iBAAiB,EAAE,CAAC;AAC7B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB;IAClC,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,cAAc,GAAG,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,QAAwB,EACxB,gBAAgB,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE;IAExC,cAAc,GAAG,cAAc,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;AAC9D,CAAC;AAED,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAC9E,8EAA8E;AAC9E,kFAAkF;AAClF,yCAAyC;AACzC,MAAM,qBAAqB,GACzB,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC;AAE3E,SAAS,sBAAsB;IAC7B,OAAO,cAAc,CAAC;QACpB;YACE,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,qBAAqB;YAC5B,YAAY,EAAE,IAAI;SACnB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,MAAiC,EAAE,CAAC;QACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,sDAAsD,KAAK,CAAC,EAAE,IAAI,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,EAAE,GAAG,cAAc,CAAC,MAAiC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,GAAwE,CAAC;IAC7E,IAAI,CAAC;QACH,GAAG,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,27 @@
+import { type AppRenderer } from "./routes/render.js";
+export type { AppRenderer };
+export interface CreateAppOptions {
+    /**
+     * Directory of a built SPA to serve at `/*` with an index.html fallback.
+     * The deployment shell decides whether (and what) to serve — the package
+     * has no client build of its own and no NODE_ENV heuristics.
+     */
+    staticRoot?: string;
+    /** Display name used in connection/status copy. Default "Brain UI". */
+    appName?: string;
+    /** SQLite path override; falls back to DB_PATH, then ./brain-ui.db. */
+    dbPath?: string;
+    /**
+     * PNG/PDF renderer for `POST /api/render`. The deployment owns the actual
+     * renderer instance (e.g. @schlessera/brain-render-puppeteer) — without one
+     * the route answers 501.
+     */
+    renderer?: AppRenderer;
+    /** Per-turn timeout in ms (default 10 minutes). */
+    turnTimeoutMs?: number;
+}
+export declare function createApp(options?: CreateAppOptions): {
+    fetch: (request: Request, env?: unknown, executionCtx?: import("hono").ExecutionContext) => Response | Promise<Response>;
+    websocket: import("hono/bun").BunWebSocketHandler<import("hono/bun").BunWebSocketData>;
+};
+//# sourceMappingURL=app.d.ts.map

package/dist/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAWA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAkB1E,YAAY,EAAE,WAAW,EAAE,CAAC;AAE5B,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAqBD,wBAAgB,SAAS,CAAC,OAAO,GAAE,gBAAqB;;;EAuFvD"}

package/dist/app.js

@@ -0,0 +1,116 @@
+import { Hono } from "hono";
+import { logger } from "hono/logger";
+import { cors } from "hono/cors";
+import { serveStatic } from "hono/bun";
+import { join } from "path";
+import { healthRoutes, statusRoutes } from "./routes/health.js";
+import { brainRoutes } from "./routes/brain.js";
+import { sessionRoutes } from "./routes/sessions.js";
+import { voiceRoutes } from "./routes/voice.js";
+import { filesRoutes } from "./routes/files.js";
+import { createRenderRoutes } from "./routes/render.js";
+import { providerRoutes } from "./routes/providers.js";
+import { resolveAuthMode, assertAuthConfig, authGuard, authRoutes, isWsAuthorized, } from "./middleware/auth.js";
+import { passkeyPublicRoutes, passkeyManagementRoutes, passwordLoginDisabled, assertPasskeyConfig, } from "./middleware/passkeys.js";
+import { configureDb } from "./db/client.js";
+import { configureWsHost, wsUpgrade, websocket } from "./ws/handler.js";
+// Cross-site WebSocket hijacking (CSWSH) defense. CORS does not apply to the WS
+// handshake and browsers do not enforce same-origin on `new WebSocket()`, so
+// rejecting a cross-site upgrade is entirely the server's job. A browser always
+// sends `Origin` on a WS handshake; a non-browser client (no Origin) is allowed
+// through here and still gated by isWsAuthorized. When ALLOWED_ORIGINS is set we
+// use it; otherwise we require the Origin's host to match the request host
+// (same-origin). Applied in every auth mode.
+function isAllowedWsOrigin(c, allowedOrigins) {
+    const origin = c.req.header("origin");
+    if (!origin)
+        return true;
+    if (allowedOrigins.length > 0)
+        return allowedOrigins.includes(origin);
+    try {
+        const host = c.req.header("host");
+        return !!host && new URL(origin).host === host;
+    }
+    catch {
+        return false;
+    }
+}
+export function createApp(options = {}) {
+    const app = new Hono();
+    const authMode = resolveAuthMode();
+    // Validate inside the factory, not the bin entry: every consumer of the app
+    // (a deployment bin, tests, another embedder) gets the same refuse-to-boot
+    // guarantee on an unsafe auth configuration.
+    assertAuthConfig(authMode);
+    assertPasskeyConfig();
+    if (options.dbPath)
+        configureDb(options.dbPath);
+    configureWsHost({
+        ...(options.appName ? { appName: options.appName } : {}),
+        ...(options.turnTimeoutMs ? { turnTimeoutMs: options.turnTimeoutMs } : {}),
+    });
+    // Middleware
+    app.use("*", logger());
+    // CORS is only needed for a SPLIT topology where the client is served from a
+    // different origin than the API. ALLOWED_ORIGINS is a comma-separated
+    // allowlist; empty/unset means same-origin (the default), so the CORS
+    // middleware is skipped entirely.
+    const allowedOrigins = (process.env.ALLOWED_ORIGINS ?? "")
+        .split(",")
+        .map((origin) => origin.trim())
+        .filter(Boolean);
+    if (allowedOrigins.length > 0) {
+        app.use("/api/*", cors({
+            origin: allowedOrigins,
+            allowMethods: ["GET", "POST", "PUT", "DELETE"],
+            allowHeaders: ["Content-Type"],
+            credentials: true,
+        }));
+    }
+    // Public routes, registered BEFORE the auth guard: only the minimal liveness
+    // probe and the login/logout routes are reachable without a session.
+    // /api/status is intentionally NOT here — it leaks the git SHA, cron errors,
+    // and a session oracle, so it lives behind the guard below.
+    app.route("/api", healthRoutes);
+    app.route("/api", authRoutes(authMode, { passwordDisabled: passwordLoginDisabled }));
+    app.route("/api", passkeyPublicRoutes(authMode));
+    // Auth guard for every other /api/* route. The probe below is intentionally
+    // behind it: an unauthenticated client gets 401 (password/proxy) or 403
+    // (tailscale) from /api/vpn-check and shows the login / VPN screen.
+    app.use("/api/*", authGuard(authMode));
+    app.get("/api/vpn-check", (c) => c.json({ vpn: true }));
+    // Passkey registration/management: after the guard, so a session is required
+    // by mount position (the public assertion routes are registered above).
+    app.route("/api", passkeyManagementRoutes(authMode));
+    app.route("/api", statusRoutes);
+    app.route("/api", brainRoutes);
+    app.route("/api", sessionRoutes);
+    app.route("/api", voiceRoutes);
+    app.route("/api", filesRoutes);
+    app.route("/api", createRenderRoutes(options.renderer));
+    app.route("/api", providerRoutes);
+    // WebSocket endpoint. Browsers can't set headers on the WS handshake, so the
+    // upgrade authenticates via the session cookie (or IP/proxy header) INSIDE
+    // the handler — no header-modifying middleware may sit on this route.
+    app.get("/ws", async (c, next) => {
+        if (!isAllowedWsOrigin(c, allowedOrigins)) {
+            return c.json({ error: "Cross-origin WebSocket rejected" }, 403);
+        }
+        if (!(await isWsAuthorized(c, authMode))) {
+            return c.json({ error: "Authentication required" }, 401);
+        }
+        return wsUpgrade(c, next);
+    });
+    // Static files: the deployment shell passes its built client explicitly.
+    if (options.staticRoot) {
+        const staticRoot = options.staticRoot;
+        app.use("/*", serveStatic({ root: staticRoot }));
+        // SPA fallback
+        app.get("*", serveStatic({ path: join(staticRoot, "index.html") }));
+    }
+    return {
+        fetch: app.fetch,
+        websocket,
+    };
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAoB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAyBxE,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,2EAA2E;AAC3E,6CAA6C;AAC7C,SAAS,iBAAiB,CAAC,CAAU,EAAE,cAAwB;IAC7D,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,UAA4B,EAAE;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,4EAA4E;IAC5E,2EAA2E;IAC3E,6CAA6C;IAC7C,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,mBAAmB,EAAE,CAAC;IAEtB,IAAI,OAAO,CAAC,MAAM;QAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,eAAe,CAAC;QACd,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAC;IAEH,aAAa;IACb,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvB,6EAA6E;IAC7E,sEAAsE;IACtE,sEAAsE;IACtE,kCAAkC;IAClC,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;SACvD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,CACL,QAAQ,EACR,IAAI,CAAC;YACH,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;YAC9C,YAAY,EAAE,CAAC,cAAc,CAAC;YAC9B,WAAW,EAAE,IAAI;SAClB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,qEAAqE;IACrE,6EAA6E;IAC7E,4DAA4D;IAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAChC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC;IACrF,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEjD,4EAA4E;IAC5E,wEAAwE;IACxE,oEAAoE;IACpE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvC,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,6EAA6E;IAC7E,wEAAwE;IACxE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrD,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAChC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC/B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACjC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC/B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC/B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxD,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAElC,6EAA6E;IAC7E,2EAA2E;IAC3E,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACjD,eAAe;QACf,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/brain/client.d.ts

@@ -0,0 +1,43 @@
+import type { BrainSearchResponse, BrainDocument, BrainStats, BrainSyncResult } from "./types.js";
+/**
+ * argv prefix for invoking the brain CLI inside BRAIN_PATH.
+ *
+ * Two brain-repo layouts exist and both must work: a repo that depends on
+ * `@schlessera/brain` gets a real bin at `node_modules/.bin/brain`, while the
+ * legacy layout vendors `scripts/brain-cli.ts`. Prefer the packaged bin.
+ *
+ * Resolved per call (a bare `existsSync` stat) rather than at import time: in
+ * the container the brain repo is cloned and `bun install`ed by entrypoint.sh,
+ * and a repo can gain the dependency without restarting this server. The same
+ * preference order is mirrored in `scripts/entrypoint.sh`, which links whichever
+ * it finds onto PATH for cron.
+ */
+export declare function brainCliCommand(): string[];
+export declare function brainSearch(query: string, opts?: {
+    type?: string;
+    tag?: string;
+    limit?: number;
+    mode?: string;
+}): Promise<BrainSearchResponse>;
+export declare function brainBriefing(): Promise<string>;
+export declare function brainStats(): Promise<BrainStats>;
+export declare function brainList(opts?: {
+    type?: string;
+    tag?: string;
+    status?: string;
+    relevance?: string;
+    limit?: number;
+}): Promise<BrainDocument[]>;
+export declare function brainRead(path: string): Promise<string>;
+export declare function brainSync(): Promise<BrainSyncResult>;
+export declare function brainAdd(content: string, opts?: {
+    type?: string;
+    title?: string;
+    tags?: string[];
+}): Promise<void>;
+export declare function brainIndex(opts?: {
+    /** Full rebuild; indexing is incremental by default since brain 22e82e1. */
+    force?: boolean;
+}): Promise<void>;
+export declare function brainValidate(): Promise<string>;
+//# sourceMappingURL=client.d.ts.map

package/dist/brain/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/brain/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,mBAAmB,EACnB,aAAa,EACb,UAAU,EACV,eAAe,EAChB,MAAM,YAAY,CAAC;AAIpB;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,IAAI,MAAM,EAAE,CAI1C;AA2CD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACpE,OAAO,CAAC,mBAAmB,CAAC,CAW9B;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAMrD;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAGtD;AAED,wBAAsB,SAAS,CAAC,IAAI,CAAC,EAAE;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAU3B;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM7D;AAED,wBAAsB,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC,CAsB1D;AAED,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAUf;AAED,wBAAsB,UAAU,CAAC,IAAI,CAAC,EAAE;IACtC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,CAMrD"}