@sema-agent/server 1.314.0 → 1.316.0

package/dist/http/routes/sessions-list.js

@@ -0,0 +1,117 @@
+import { isUuidV7 } from "../../security.js";
+import { sendJson } from "../send.js";
+export async function handleSessionsList(req, res, url, ctx) {
+    const miss = { fell: false };
+    await handleSessionsListBody(req, res, url, ctx, miss);
+    return !miss.fell;
+}
+async function handleSessionsListBody(req, res, url, ctx, miss) {
+    const { deps } = ctx;
+    const { isFleetWide, sessionOwnerScope } = ctx.helpers;
+    if (req.method === "GET" && url === "/v1/sessions") {
+        const { fleetWide, gateOwner } = sessionOwnerScope(req);
+        if (!fleetWide && gateOwner === null) {
+            sendJson(res, 401, { error: "unauthorized" });
+            return;
+        }
+        const lister = deps.sessionStorage?.listSessions?.bind(deps.sessionStorage) ?? deps.runStore?.listSessions?.bind(deps.runStore);
+        if (!lister) {
+            sendJson(res, 501, { error: "session list requires a durable session store (SESSION_BACKEND=tidb)" });
+            return;
+        }
+        await handleSessionList(res, lister, new URL(req.url ?? "", "http://x").searchParams, gateOwner);
+        return;
+    }
+    if (req.method === "GET" && url === "/v1/sendfile-links") {
+        const { fleetWide, gateOwner } = sessionOwnerScope(req);
+        if (!fleetWide && gateOwner === null) {
+            sendJson(res, 401, { error: "unauthorized" });
+            return;
+        }
+        if (!deps.sendFileLedger) {
+            sendJson(res, 501, { error: "sendfile ledger requires a store backend (DB_BACKEND=tidb|pg|local) and the SendUserFile issuer configured" });
+            return;
+        }
+        const query = new URL(req.url ?? "", "http://x").searchParams;
+        const limitRaw = query.get("limit");
+        if (limitRaw !== null && !(/^[0-9]+$/.test(limitRaw) && Number(limitRaw) >= 1 && Number(limitRaw) <= 100)) {
+            sendJson(res, 400, { error: "limit must be a decimal integer in 1..100" });
+            return;
+        }
+        const limit = limitRaw === null ? 50 : Number(limitRaw);
+        const beforeRaw = query.get("before");
+        if (beforeRaw !== null && !isUuidV7(beforeRaw)) {
+            sendJson(res, 400, { error: "before must be a uuidv7 link id (the `id`/`nextBefore` of a previous page)" });
+            return;
+        }
+        const before = beforeRaw ?? undefined;
+        let scope;
+        if (gateOwner !== null) {
+            scope = gateOwner;
+        }
+        else {
+            const scopeRaw = query.get("scope");
+            if (scopeRaw === null) {
+                scope = "_";
+            }
+            else {
+                const s = scopeRaw.trim();
+                if (s === "" || s.length > 190) {
+                    sendJson(res, 400, { error: "scope must be a non-blank tenant principal of at most 190 characters (the sendfile_link.scope column width)" });
+                    return;
+                }
+                scope = s;
+            }
+        }
+        const rows = await deps.sendFileLedger.listByScope(scope, limit + 1, before);
+        const hasMore = rows.length > limit;
+        const page = hasMore ? rows.slice(0, limit) : rows;
+        sendJson(res, 200, {
+            links: page.map((r) => ({
+                id: r.id,
+                filename: r.filename,
+                size: r.size,
+                ttlSec: r.ttlSec,
+                track: r.track,
+                bucket: r.bucket,
+                key: r.objectKey,
+                createdAt: new Date(r.createdAt).toISOString(),
+                ...(r.taskId !== undefined ? { taskId: r.taskId } : {}),
+                ...(r.sessionId !== undefined ? { sessionId: r.sessionId } : {}),
+            })),
+            ...(hasMore ? { nextBefore: page[page.length - 1].id } : {}),
+        });
+        return;
+    }
+    miss.fell = true;
+}
+function encodeSessionCursor(c) {
+    return Buffer.from(JSON.stringify(c)).toString("base64url");
+}
+function decodeSessionCursor(s) {
+    if (!s)
+        return undefined;
+    try {
+        const o = JSON.parse(Buffer.from(s, "base64url").toString());
+        return o.lastActivityAt && o.sessionId && !Number.isNaN(Date.parse(o.lastActivityAt))
+            ? { lastActivityAt: o.lastActivityAt, sessionId: o.sessionId }
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function handleSessionList(res, lister, query, forceOwner) {
+    const owner = forceOwner != null ? forceOwner : (query.get("owner") ?? undefined);
+    const limit = Math.min(100, Math.max(1, Number(query.get("limit") ?? 50) || 50));
+    const cursor = decodeSessionCursor(query.get("cursor"));
+    const qRaw = (query.get("q") ?? "").trim();
+    const q = qRaw ? qRaw.slice(0, 256) : undefined;
+    const rows = await lister({ ...(owner ? { owner } : {}), ...(cursor ? { cursor } : {}), limit: limit + 1, ...(q ? { q } : {}) });
+    const hasMore = rows.length > limit;
+    const page = hasMore ? rows.slice(0, limit) : rows;
+    const last = page[page.length - 1];
+    const nextCursor = hasMore && last ? encodeSessionCursor({ lastActivityAt: last.lastActivityAt, sessionId: last.sessionId }) : undefined;
+    sendJson(res, 200, { sessions: page, ...(nextCursor ? { nextCursor } : {}) });
+}
+//# sourceMappingURL=sessions-list.js.map

package/dist/http/routes/sessions.d.ts

@@ -0,0 +1,17 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { RouteCtx } from "../route-ctx.js";
+export interface SessionsLocal {
+    sseConnections: number;
+    sseOwnerLookups: number;
+    mcpStatusCache: Map<string, {
+        at: number;
+        panel: Promise<{
+            servers: unknown[];
+            asOf: string;
+            degraded?: boolean;
+        }>;
+    }>;
+}
+export declare function createSessionsLocal(): SessionsLocal;
+export declare function handleSessions(req: IncomingMessage, res: ServerResponse, url: string, ctx: RouteCtx): Promise<boolean>;
+//# sourceMappingURL=sessions.d.ts.map