@schlessera/brain-ui-server 0.4.0

package/dist/files/walker.js

@@ -0,0 +1,416 @@
+import { readdir, readFile, stat, realpath } from "node:fs/promises";
+import { join, resolve, sep, posix, dirname } from "node:path";
+import { existsSync } from "node:fs";
+import ignore from "ignore";
+import { FILE_SIZE_CAP_BYTES } from "@schlessera/brain-ui-sdk/protocol";
+const HARD_EXCLUDE_DIRS = new Set([".git", "node_modules"]);
+const HARD_EXCLUDE_FILE_PATTERNS = [
+    /\.db$/i,
+    /\.db-wal$/i,
+    /\.db-shm$/i,
+];
+// Build / dependency manifests that aren't browseable content. Matched by
+// exact name (case-insensitive) at any depth.
+const HARD_EXCLUDE_FILE_NAMES = new Set([
+    "package.json",
+    "package-lock.json",
+    "bun.lock",
+    "bun.lockb",
+    "yarn.lock",
+    "pnpm-lock.yaml",
+    "skills-lock.json",
+].map((n) => n.toLowerCase()));
+export function getBrainRoot() {
+    return process.env.BRAIN_PATH || join(process.env.HOME || "/root", "brain");
+}
+export class PathEscapeError extends Error {
+    constructor(rel) {
+        super(`path_escape: ${rel}`);
+        this.name = "PathEscapeError";
+    }
+}
+export class NotFoundError extends Error {
+    constructor(rel) {
+        super(`not_found: ${rel}`);
+        this.name = "NotFoundError";
+    }
+}
+export class TooLargeError extends Error {
+    size;
+    constructor(size) {
+        super(`file_too_large: ${size}`);
+        this.size = size;
+        this.name = "TooLargeError";
+    }
+}
+/**
+ * Resolve a repo-relative path to an absolute path, rejecting any escape
+ * outside the brain root (including via symlinks).
+ */
+export async function safeResolve(rel, root = getBrainRoot()) {
+    if (typeof rel !== "string")
+        throw new PathEscapeError(String(rel));
+    // Reject absolute paths and null bytes
+    if (rel.startsWith("/") || rel.startsWith("\\") || rel.includes("\0")) {
+        throw new PathEscapeError(rel);
+    }
+    // Normalize separators; reject ".." segments anywhere
+    const normalized = rel.replace(/\\/g, "/");
+    for (const seg of normalized.split("/")) {
+        if (seg === "..")
+            throw new PathEscapeError(rel);
+    }
+    const absRoot = resolve(root);
+    const abs = resolve(absRoot, normalized);
+    if (abs !== absRoot && !abs.startsWith(absRoot + sep)) {
+        throw new PathEscapeError(rel);
+    }
+    // Check for symlink escape via realpath when the path exists
+    if (existsSync(abs)) {
+        const real = await realpath(abs);
+        if (real !== absRoot && !real.startsWith(absRoot + sep)) {
+            throw new PathEscapeError(rel);
+        }
+    }
+    return abs;
+}
+const ignoreCache = new Map();
+async function loadIgnore(root) {
+    const gitignore = join(root, ".gitignore");
+    let mtime = 0;
+    try {
+        const s = await stat(gitignore);
+        mtime = s.mtimeMs;
+    }
+    catch {
+        // no .gitignore — empty matcher
+    }
+    const cached = ignoreCache.get(root);
+    if (cached && cached.mtime === mtime)
+        return cached.matcher;
+    const matcher = ignore();
+    if (mtime > 0) {
+        try {
+            const text = await readFile(gitignore, "utf8");
+            matcher.add(text);
+        }
+        catch { }
+    }
+    ignoreCache.set(root, { matcher, mtime });
+    return matcher;
+}
+function isHardExcluded(name, isDir) {
+    // Hide all dotfiles and dot-directories — they are tooling/config noise
+    // (.git, .gitignore, .agents, .claude, .brain-ui, etc.) that the user
+    // doesn't want to navigate as content.
+    if (name.startsWith("."))
+        return true;
+    if (isDir)
+        return HARD_EXCLUDE_DIRS.has(name);
+    if (HARD_EXCLUDE_FILE_NAMES.has(name.toLowerCase()))
+        return true;
+    return HARD_EXCLUDE_FILE_PATTERNS.some((re) => re.test(name));
+}
+/**
+ * List entries of a directory, applying ignore rules.
+ * Always excludes: .git, node_modules, *.db*. Then applies .gitignore.
+ */
+export async function listDirectory(rel, root = getBrainRoot()) {
+    const abs = await safeResolve(rel, root);
+    let s;
+    try {
+        s = await stat(abs);
+    }
+    catch {
+        throw new NotFoundError(rel);
+    }
+    if (!s.isDirectory())
+        throw new NotFoundError(rel);
+    const matcher = await loadIgnore(root);
+    const dirents = await readdir(abs, { withFileTypes: true });
+    const entries = [];
+    for (const d of dirents) {
+        const isDir = d.isDirectory();
+        const isFile = d.isFile();
+        const isSymlink = d.isSymbolicLink();
+        if (!isDir && !isFile && !isSymlink)
+            continue;
+        if (isHardExcluded(d.name, isDir))
+            continue;
+        const relChild = rel ? posix.join(rel, d.name) : d.name;
+        // ignore expects trailing slash on dirs to match dir-only rules
+        const matchPath = isDir ? `${relChild}/` : relChild;
+        if (matcher.ignores(matchPath))
+            continue;
+        let childStat;
+        try {
+            childStat = await stat(join(abs, d.name));
+        }
+        catch {
+            continue; // broken symlink
+        }
+        // Resolve symlinks: drop ones that escape the root
+        if (isSymlink) {
+            try {
+                const real = await realpath(join(abs, d.name));
+                const absRoot = resolve(root);
+                if (real !== absRoot && !real.startsWith(absRoot + sep))
+                    continue;
+            }
+            catch {
+                continue;
+            }
+        }
+        entries.push({
+            name: d.name,
+            path: relChild,
+            type: childStat.isDirectory() ? "dir" : "file",
+            size: childStat.isFile() ? childStat.size : undefined,
+            mtime: Math.floor(childStat.mtimeMs),
+        });
+    }
+    entries.sort((a, b) => {
+        if (a.type !== b.type)
+            return a.type === "dir" ? -1 : 1;
+        return a.name.localeCompare(b.name, undefined, { sensitivity: "base" });
+    });
+    return entries;
+}
+const MARKDOWN_EXT = new Set([".md", ".markdown", ".mdx"]);
+const HTML_EXT = new Set([".html", ".htm"]);
+const KNOWN_TEXT_EXT = new Set([
+    ".txt", ".text", ".log",
+    ".json", ".jsonc", ".yaml", ".yml", ".toml", ".xml", ".csv", ".tsv",
+    ".js", ".jsx", ".ts", ".tsx", ".mjs", ".cjs",
+    ".py", ".rb", ".go", ".rs", ".java", ".kt", ".swift", ".c", ".h",
+    ".cpp", ".hpp", ".cc", ".cs", ".php", ".sh", ".bash", ".zsh", ".fish",
+    ".css", ".scss", ".sass", ".less",
+    ".sql", ".env", ".ini", ".conf", ".cfg",
+    ".gitignore", ".gitattributes", ".editorconfig", ".prettierrc",
+    ".dockerfile", ".lock",
+]);
+function extOf(name) {
+    const i = name.lastIndexOf(".");
+    if (i < 0)
+        return "";
+    return name.slice(i).toLowerCase();
+}
+export function classifyKind(name, bytes) {
+    const ext = extOf(name);
+    if (MARKDOWN_EXT.has(ext))
+        return "markdown";
+    if (HTML_EXT.has(ext))
+        return "html";
+    if (KNOWN_TEXT_EXT.has(ext))
+        return "text";
+    // Bare names like "Dockerfile", "Makefile", "LICENSE", "README"
+    const base = name.toLowerCase();
+    if (["dockerfile", "makefile", "license", "licence", "readme", "changelog", "authors", "contributors", "notice"].includes(base)) {
+        return "text";
+    }
+    // Fall back to byte sniff: a buffer is "text" if no NUL byte in first 4KB and decodes as UTF-8.
+    if (bytes) {
+        const slice = bytes.subarray(0, Math.min(bytes.length, 4096));
+        if (slice.includes(0))
+            return "binary";
+        try {
+            new TextDecoder("utf-8", { fatal: true }).decode(slice);
+            return "text";
+        }
+        catch {
+            return "binary";
+        }
+    }
+    return "binary";
+}
+const MIME_BY_EXT = {
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".svg": "image/svg+xml",
+    ".avif": "image/avif",
+    ".bmp": "image/bmp",
+    ".ico": "image/x-icon",
+    ".pdf": "application/pdf",
+    ".mp3": "audio/mpeg",
+    ".wav": "audio/wav",
+    ".mp4": "video/mp4",
+    ".webm": "video/webm",
+};
+export function mimeFor(name, kind) {
+    const ext = extOf(name);
+    if (MIME_BY_EXT[ext])
+        return MIME_BY_EXT[ext];
+    if (kind === "markdown")
+        return "text/markdown; charset=utf-8";
+    if (kind === "html")
+        return "text/html; charset=utf-8";
+    if (kind === "text")
+        return "text/plain; charset=utf-8";
+    return "application/octet-stream";
+}
+export async function readFileContent(rel, root = getBrainRoot()) {
+    const abs = await safeResolve(rel, root);
+    let s;
+    try {
+        s = await stat(abs);
+    }
+    catch {
+        throw new NotFoundError(rel);
+    }
+    if (!s.isFile())
+        throw new NotFoundError(rel);
+    if (s.size > FILE_SIZE_CAP_BYTES)
+        throw new TooLargeError(s.size);
+    const ext = extOf(abs);
+    const presumed = MARKDOWN_EXT.has(ext)
+        ? "markdown"
+        : HTML_EXT.has(ext)
+            ? "html"
+            : KNOWN_TEXT_EXT.has(ext)
+                ? "text"
+                : null;
+    if (presumed) {
+        const content = await readFile(abs, "utf8");
+        return {
+            kind: presumed,
+            size: s.size,
+            mtime: Math.floor(s.mtimeMs),
+            mime: mimeFor(rel, presumed),
+            content,
+        };
+    }
+    const buf = await readFile(abs);
+    const kind = classifyKind(abs, buf);
+    if (kind === "text" || kind === "markdown" || kind === "html") {
+        return {
+            kind,
+            size: s.size,
+            mtime: Math.floor(s.mtimeMs),
+            mime: mimeFor(rel, kind),
+            content: buf.toString("utf8"),
+        };
+    }
+    return {
+        kind: "binary",
+        size: s.size,
+        mtime: Math.floor(s.mtimeMs),
+        mime: mimeFor(rel, "binary"),
+    };
+}
+/**
+ * Stream raw bytes of a file (for image/binary preview).
+ * Returns the absolute path; caller uses Bun.file() to stream.
+ */
+export async function resolveForRaw(rel, root = getBrainRoot()) {
+    const abs = await safeResolve(rel, root);
+    let s;
+    try {
+        s = await stat(abs);
+    }
+    catch {
+        throw new NotFoundError(rel);
+    }
+    if (!s.isFile())
+        throw new NotFoundError(rel);
+    if (s.size > FILE_SIZE_CAP_BYTES)
+        throw new TooLargeError(s.size);
+    const kind = classifyKind(abs);
+    return { abs, size: s.size, mime: mimeFor(rel, kind), kind };
+}
+/**
+ * Walk the brain repo and build a slug -> repo-relative-path map for all
+ * markdown files (.md / .markdown / .mdx), respecting the same ignore
+ * rules as listDirectory. Slug = basename without extension, lowercase.
+ *
+ * If two files share a slug (rare), the first one encountered wins —
+ * deterministic given the sorted directory traversal.
+ */
+export async function buildWikilinkMap(root = getBrainRoot()) {
+    const matcher = await loadIgnore(root);
+    const out = {};
+    async function walk(rel) {
+        const abs = await safeResolve(rel, root);
+        let dirents;
+        try {
+            dirents = await readdir(abs, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        // Sort for deterministic precedence
+        dirents.sort((a, b) => a.name.localeCompare(b.name));
+        for (const d of dirents) {
+            const isDir = d.isDirectory();
+            const isFile = d.isFile();
+            const isSymlink = d.isSymbolicLink();
+            if (!isDir && !isFile && !isSymlink)
+                continue;
+            if (isHardExcluded(d.name, isDir))
+                continue;
+            const relChild = rel ? posix.join(rel, d.name) : d.name;
+            const matchPath = isDir ? `${relChild}/` : relChild;
+            if (matcher.ignores(matchPath))
+                continue;
+            let childStat;
+            try {
+                childStat = await stat(join(abs, d.name));
+            }
+            catch {
+                continue;
+            }
+            if (isSymlink) {
+                try {
+                    const real = await realpath(join(abs, d.name));
+                    const absRoot = resolve(root);
+                    if (real !== absRoot && !real.startsWith(absRoot + sep))
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+            }
+            if (childStat.isDirectory()) {
+                await walk(relChild);
+                continue;
+            }
+            const lower = d.name.toLowerCase();
+            const dot = lower.lastIndexOf(".");
+            const ext = dot >= 0 ? lower.slice(dot) : "";
+            if (ext !== ".md" && ext !== ".markdown" && ext !== ".mdx")
+                continue;
+            const slug = lower.slice(0, dot);
+            if (slug && !out[slug])
+                out[slug] = relChild;
+        }
+    }
+    await walk("");
+    return out;
+}
+/**
+ * Return ancestor directories of a path, root-first (excluding root and the path itself).
+ *   resolve("a/b/c.md") -> { ancestors: ["a", "a/b"], exists, type }
+ */
+export async function resolveAncestors(rel, root = getBrainRoot()) {
+    const normalized = rel.replace(/\\/g, "/").replace(/^\/+|\/+$/g, "");
+    if (!normalized)
+        return { ancestors: [], exists: true, type: "dir" };
+    const parts = normalized.split("/");
+    const ancestors = [];
+    for (let i = 1; i < parts.length; i++) {
+        ancestors.push(parts.slice(0, i).join("/"));
+    }
+    try {
+        const abs = await safeResolve(normalized, root);
+        const s = await stat(abs);
+        return { ancestors, exists: true, type: s.isDirectory() ? "dir" : "file" };
+    }
+    catch {
+        return { ancestors, exists: false };
+    }
+}
+// Re-export for callers
+export { dirname };
+//# sourceMappingURL=walker.js.map

package/dist/files/walker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walker.js","sourceRoot":"","sources":["../../src/files/walker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,MAAuB,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAC5D,MAAM,0BAA0B,GAAG;IACjC,QAAQ;IACR,YAAY;IACZ,YAAY;CACb,CAAC;AACF,0EAA0E;AAC1E,8CAA8C;AAC9C,MAAM,uBAAuB,GAAG,IAAI,GAAG,CACrC;IACE,cAAc;IACd,mBAAmB;IACnB,UAAU;IACV,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9B,CAAC;AAEF,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,OAAO,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,GAAW;QACrB,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,GAAW;QACrB,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IACnB;IAAnB,YAAmB,IAAY;QAC7B,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QADhB,SAAI,GAAJ,IAAI,CAAQ;QAE7B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,IAAI,GAAG,YAAY,EAAE;IAClE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,uCAAuC;IACvC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,sDAAsD;IACtD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,6DAA6D;IAC7D,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAwB,CAAC;AAEpD,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,gCAAgC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAE5D,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;IACzB,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,KAAc;IAClD,wEAAwE;IACxE,sEAAsE;IACtE,uCAAuC;IACvC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAI,GAAG,YAAY,EAAE;IACpE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;IACN,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5D,MAAM,OAAO,GAAgB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;YAAE,SAAS;QAC9C,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,SAAS;QAE5C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,gEAAgE;QAChE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpD,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,SAAS;QAEzC,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,iBAAiB;QAC7B,CAAC;QACD,mDAAmD;QACnD,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;oBAAE,SAAS;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM;YAC9C,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACrD,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAC5C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,MAAM,EAAE,OAAO,EAAE,MAAM;IACvB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACnE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI;IAChE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO;IACrE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IACjC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACvC,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa;IAC9D,aAAa,EAAE,OAAO;CACvB,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,IAAY;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,KAAc;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,gEAAgE;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAChC,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChI,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,gGAAgG;IAChG,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC;QACvC,IAAI,CAAC;YACH,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,WAAW,GAA2B;IAC1C,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,eAAe;IACvB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;CACtB,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAqB;IACzD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,8BAA8B,CAAC;IAC/D,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,0BAA0B,CAAC;IACvD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,2BAA2B,CAAC;IACxD,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAAI,GAAG,YAAY,EAAE;IACtE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;IACN,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,IAAI,GAAG,mBAAmB;QAAE,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAElE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,QAAQ,GAA2B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;QAC5D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YACjB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBACvB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,CAAC;IAEb,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;YAC5B,OAAO;SACR,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9D,OAAO;YACL,IAAI;YACJ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;YACxB,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAI,GAAG,YAAY,EAAE;IACpE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC;IACN,IAAI,CAAC;QACH,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,IAAI,GAAG,mBAAmB;QAAE,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAI,GAAG,YAAY,EAAE;IAC1D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,oCAAoC;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;gBAAE,SAAS;YAC9C,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC;gBAAE,SAAS;YAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpD,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;gBAAE,SAAS;YAEzC,IAAI,SAAS,CAAC;YACd,IAAI,CAAC;gBACH,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;wBAAE,SAAS;gBACpE,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM;gBAAE,SAAS;YACrE,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjC,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAI,GAAG,YAAY,EAAE;IACvE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,wBAAwB;AACxB,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @schlessera/brain-ui-server — the chat-UI backend as a library.
+ *
+ * The deployment shell owns the process: it builds the Bun.serve() object,
+ * decides the port/idleTimeout, wires SIGTERM, and injects deployment-only
+ * pieces (static client build, PNG/PDF renderer). Everything else — routes,
+ * auth, passkeys, the WebSocket turn coordinator, the session catalog — lives
+ * behind createApp().
+ */
+export { createApp, type CreateAppOptions, type AppRenderer } from "./app.js";
+export { websocket, cancelActiveTurn, isTurnActive } from "./ws/handler.js";
+export { getDb, closeDb, configureDb } from "./db/client.js";
+export { getBackends, getBackendsInfo } from "./agent/backend.js";
+export { resolveAuthMode, type AuthMode } from "./middleware/auth.js";
+export { WsHost, type WsHostOptions, defaultWsHost, configureWsHost, handleClientMessage, resetForTests, resolveTurnTarget, createSessionCatalog, type SessionCatalog, } from "./ws/handler.js";
+export * as brainClient from "./brain/client.js";
+export { buildKeyterms, writeCache } from "./voice/keyterm-builder.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAG9E,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAI7D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGtE,OAAO,EACL,MAAM,EACN,KAAK,aAAa,EAClB,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,cAAc,GACpB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -0,0 +1,25 @@
+/**
+ * @schlessera/brain-ui-server — the chat-UI backend as a library.
+ *
+ * The deployment shell owns the process: it builds the Bun.serve() object,
+ * decides the port/idleTimeout, wires SIGTERM, and injects deployment-only
+ * pieces (static client build, PNG/PDF renderer). Everything else — routes,
+ * auth, passkeys, the WebSocket turn coordinator, the session catalog — lives
+ * behind createApp().
+ */
+export { createApp } from "./app.js";
+// Process lifecycle helpers for the bin entry.
+export { websocket, cancelActiveTurn, isTurnActive } from "./ws/handler.js";
+export { getDb, closeDb, configureDb } from "./db/client.js";
+// Boot-time diagnostics (fail fast on a bad AGENT_BACKEND / profile config,
+// log the resolved auth mode).
+export { getBackends, getBackendsInfo } from "./agent/backend.js";
+export { resolveAuthMode } from "./middleware/auth.js";
+// WebSocket internals for embedders and tests.
+export { WsHost, defaultWsHost, configureWsHost, handleClientMessage, resetForTests, resolveTurnTarget, createSessionCatalog, } from "./ws/handler.js";
+// Brain repo access (spawned CLI wrapper) — useful for embedders that add
+// their own routes on top.
+export * as brainClient from "./brain/client.js";
+// Voice keyterm cache rebuild (used by deployments after `brain sync`).
+export { buildKeyterms, writeCache } from "./voice/keyterm-builder.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAA2C,MAAM,UAAU,CAAC;AAE9E,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7D,4EAA4E;AAC5E,+BAA+B;AAC/B,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAiB,MAAM,sBAAsB,CAAC;AAEtE,+CAA+C;AAC/C,OAAO,EACL,MAAM,EAEN,aAAa,EACb,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,iBAAiB,CAAC;AAEzB,0EAA0E;AAC1E,2BAA2B;AAC3B,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AAEjD,wEAAwE;AACxE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,59 @@
+import { Hono } from "hono";
+import type { Context, MiddlewareHandler } from "hono";
+/**
+ * Authentication for a remote surface to an agent with write access to the
+ * user's files. Modes (AUTH_MODE):
+ *
+ * - `password`  — a single shared password (Bun.password argon2id hash in
+ *                 BRAIN_UI_PASSWORD_HASH), a signed HttpOnly SameSite=Strict
+ *                 session cookie (COOKIE_SECRET), a rate-limited login route.
+ *                 The only mode where `docker compose up` on a bare VPS is safe.
+ * - `tailscale` — Tailscale IP allowlist (today's model). Header trust is gated
+ *                 behind TRUST_PROXY=1; otherwise the socket address is used.
+ * - `proxy`     — trust an upstream auth header (PROXY_AUTH_HEADER) set by
+ *                 Authelia / oauth2-proxy / Caddy basic_auth, etc.
+ * - `none`      — no auth. REFUSES to start unless HOST is loopback (fail
+ *                 closed), regardless of NODE_ENV; the only override is the
+ *                 explicit BRAIN_UI_DANGEROUSLY_DISABLE_AUTH=1 escape hatch.
+ *
+ * Default: `password` when BRAIN_UI_PASSWORD_HASH is set, else `tailscale`.
+ */
+export type AuthMode = "password" | "tailscale" | "proxy" | "none";
+export declare const LOGIN_RATE_LIMIT = 5;
+export declare const GLOBAL_LOGIN_RATE_LIMIT = 20;
+export declare function resolveAuthMode(): AuthMode;
+/**
+ * Validate the auth configuration at startup. Throws (refusing to boot) on an
+ * unsafe or unusable configuration.
+ */
+export declare function assertAuthConfig(mode: AuthMode): void;
+/** Middleware guarding /api/* according to the resolved mode. */
+export declare function authGuard(mode: AuthMode): MiddlewareHandler;
+/**
+ * Authorize a WebSocket upgrade. The upgrade handler must call this itself —
+ * browsers can't set headers on the WS handshake, so the session cookie (sent
+ * automatically same-origin) is the credential, and no header-modifying
+ * middleware may sit on the WS route (immutable-header errors). Mirrors
+ * {@link authGuard} without emitting a response.
+ */
+export declare function isWsAuthorized(c: Context, mode: AuthMode): Promise<boolean>;
+/**
+ * Mint the session cookie. The single place a session comes into existence —
+ * both password login and passkey login (middleware/passkeys.ts) call this, so
+ * authGuard / isWsAuthorized / TTL semantics stay identical across methods.
+ */
+export declare function issueSessionCookie(c: Context): Promise<void>;
+/** Test-only: clear all rate-limit buckets (they are module-global state). */
+export declare function resetLoginRateLimiter(): void;
+export declare function consumeLoginToken(key: string, limit: number): boolean;
+/** Login/logout routes. Only functional in `password` mode. */
+export declare function authRoutes(mode: AuthMode, deps?: {
+    /**
+     * When provided and returning true, password login is refused (the app
+     * injects passkeys' passwordLoginDisabled so the shared password dies
+     * once a passkey exists for the RP). Injected to keep this module free
+     * of WebAuthn concerns.
+     */
+    passwordDisabled?: (c: Context) => boolean;
+}): Hono;
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAIvD;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAInE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAQlC,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAG1C,wBAAgB,eAAe,IAAI,QAAQ,CAe1C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAwDrD;AAED,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,iBAAiB,CAqC3D;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAWjF;AAID;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAYlE;AA4CD,8EAA8E;AAC9E,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAUrE;AAED,+DAA+D;AAC/D,wBAAgB,UAAU,CACxB,IAAI,EAAE,QAAQ,EACd,IAAI,GAAE;IACJ;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC;CACvC,GACL,IAAI,CAkDN"}