@spinabot/brigade 0.1.2 → 1.0.1

package/dist/core/server-methods/sessions.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Sessions-related gateway method handlers (Step 25).
+ *
+ * Brand-scrubbed analogue of upstream's `src/gateway/server-methods/sessions.ts`,
+ * scoped to the four methods Brigade's sessions tool surface (Steps
+ * 19-23) actually calls:
+ *
+ *   - `sessions.list`     → enumerate live sessions
+ *   - `sessions.history`  → read JSONL transcript
+ *   - `sessions.send`     → enqueue a message into a session's lane
+ *   - `sessions.spawn`    → invoke Step 20's spawn engine
+ *
+ * Brigade scope notes:
+ *
+ *   - The handlers here are PURE — they take their params and return a
+ *     result. The transport (WebSocket / in-process) is the
+ *     `gateway-caller-impl.ts` layer's responsibility.
+ *   - Param validation is light at this milestone (the protocol layer
+ *     does the heavy AJV check before dispatch lands). Defensive coercion
+ *     prevents wild input from crashing the handler.
+ *   - `sessions.history` delegates to a `historyReader` dependency so
+ *     tests can inject a stub and the live runtime can wire to the JSONL
+ *     reader (Pi `SessionManager.readMessages` adapter).
+ *   - `sessions.send` here is a THIN passthrough — it dispatches the
+ *     inbound message into the target's lane and emits the lifecycle
+ *     event. The actual LLM turn execution is owned by Step 25's
+ *     `agent-dispatcher.ts`.
+ */
+import { type DispatchAgentRunDeps } from "../agent-dispatcher.js";
+import { type LiveSessionRecord } from "../../agents/session-registry.js";
+/**
+ * Wave O0.5: server-side access guard.
+ *
+ * Each handler accepts an optional `accessCheck` dep. The gateway boot path
+ * wires a closure that resolves the requester's session key from the
+ * per-connection auth context + the current visibility/A2A policy, then
+ * defers to `checkSessionToolAccess` (the same helper the tool surface uses).
+ *
+ * Handlers that receive `accessCheck === undefined` execute as before —
+ * meaningful for legacy in-process callers (boot wiring, test fixtures)
+ * that have already proven trust. WebSocket RPC always wires a guard.
+ */
+export type SessionsHandlerAccessAction = "list" | "history" | "send" | "spawn" | "abort" | "steer" | "agent" | "patch";
+export interface SessionsHandlerAccessCheck {
+    (params: {
+        action: SessionsHandlerAccessAction;
+        targetSessionKey: string;
+    }): {
+        allowed: boolean;
+        reason?: string;
+    };
+}
+/**
+ * Typed error thrown when the access guard refuses a gateway-side call.
+ * The WebSocket dispatcher reads `code` and maps it to a typed RPC error
+ * envelope (instead of the generic `internal` bucket), and in-process
+ * callers can catch on `name === "SessionsAccessForbiddenError"`.
+ */
+export declare class SessionsAccessForbiddenError extends Error {
+    readonly code = "forbidden";
+    constructor(reason: string);
+}
+import type { SessionsHistoryParams, SessionsHistoryResult, SessionsListParams, SessionsListResult, SessionsPatchParams, SessionsPatchResult, SessionsSendParams, SessionsSendResult, SessionsSpawnParams, SessionsSpawnResult, SessionListRow } from "../../protocol/methods.js";
+export interface SessionsListHandlerDeps {
+    /**
+     * Brigade's session-store lookup (Step 9). When supplied, the handler
+     * enriches each live row with persisted metadata (label, model,
+     * tokens, etc.). When omitted, only the in-memory registry view is
+     * returned.
+     */
+    enrichRow?: (record: LiveSessionRecord) => SessionListRow;
+    /**
+     * Wave O0.5 access guard. When set, every candidate row is checked
+     * before inclusion; refused rows are dropped (NOT an error — list is
+     * filter-shaped). Omitted by trusted in-process callers.
+     */
+    accessCheck?: SessionsHandlerAccessCheck;
+}
+export declare function handleSessionsList(params?: SessionsListParams, deps?: SessionsListHandlerDeps): Promise<SessionsListResult>;
+export interface SessionsHistoryHandlerDeps {
+    /** Mandatory reader — Brigade's runtime wires this to the JSONL adapter. */
+    readMessages: (params: {
+        sessionKey: string;
+        limit?: number;
+    }) => Promise<ReadonlyArray<unknown>>;
+    /**
+     * Wave O0.5 access guard. Refused calls throw
+     * `SessionsAccessForbiddenError` which the RPC layer maps to a typed
+     * `forbidden` response. Omitted by trusted in-process callers.
+     */
+    accessCheck?: SessionsHandlerAccessCheck;
+}
+export declare function handleSessionsHistory(params: SessionsHistoryParams, deps: SessionsHistoryHandlerDeps): Promise<SessionsHistoryResult>;
+export interface SessionsSendHandlerDeps extends DispatchAgentRunDeps {
+    /**
+     * Wave O0.5 access guard. Refused calls throw
+     * `SessionsAccessForbiddenError`. Omitted by trusted in-process callers.
+     */
+    accessCheck?: SessionsHandlerAccessCheck;
+}
+export declare function handleSessionsSend(params: SessionsSendParams, deps: SessionsSendHandlerDeps): Promise<SessionsSendResult>;
+export interface SessionsSpawnHandlerDeps {
+    /**
+     * Caller's current session depth, resolved from the session store.
+     * Brigade wires this from the persisted session entry; tests pass
+     * a constant.
+     */
+    resolveCallerDepth?: (params: {
+        sessionKey: string;
+    }) => number | Promise<number>;
+    /**
+     * Wave O0.5 access guard. Spawn is checked against the
+     * `parentSessionKey` because the child key is minted by the engine.
+     */
+    accessCheck?: SessionsHandlerAccessCheck;
+}
+/**
+ * Handle the `sessions.patch` RPC. Looks up the agentId from the
+ * session key, then upserts the patch into the per-agent session store
+ * via `upsertSessionEntry`. Returns `{ok, created, sessionId}`.
+ *
+ * Brigade's existing per-agent session-store is the source of truth
+ * here — the cross-agent registry from Step 9 is a parallel surface
+ * scoped to the new `brigade-store.json`. The two stores serve
+ * different consumers and never share entries.
+ */
+export interface SessionsPatchHandlerDeps {
+    /** Wave O0.5 access guard — refused calls throw. */
+    accessCheck?: SessionsHandlerAccessCheck;
+}
+export declare function handleSessionsPatch(params: SessionsPatchParams, deps?: SessionsPatchHandlerDeps): Promise<SessionsPatchResult>;
+export declare function handleSessionsSpawn(params: SessionsSpawnParams, deps?: SessionsSpawnHandlerDeps): Promise<SessionsSpawnResult>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/core/server-methods/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/core/server-methods/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAEN,KAAK,iBAAiB,EACtB,MAAM,kCAAkC,CAAC;AAK1C;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,2BAA2B,GACpC,MAAM,GACN,SAAS,GACT,MAAM,GACN,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,GACP,OAAO,CAAC;AAEX,MAAM,WAAW,0BAA0B;IAC1C,CAAC,MAAM,EAAE;QACR,MAAM,EAAE,2BAA2B,CAAC;QACpC,gBAAgB,EAAE,MAAM,CAAC;KACzB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACtD,QAAQ,CAAC,IAAI,eAAe;gBAChB,MAAM,EAAE,MAAM;CAI1B;AAcD,OAAO,KAAK,EACX,qBAAqB,EACrB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,cAAc,EACd,MAAM,2BAA2B,CAAC;AAInC,MAAM,WAAW,uBAAuB;IACvC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,cAAc,CAAC;IAC1D;;;;OAIG;IACH,WAAW,CAAC,EAAE,0BAA0B,CAAC;CACzC;AAED,wBAAsB,kBAAkB,CACvC,MAAM,GAAE,kBAAuB,EAC/B,IAAI,GAAE,uBAA4B,GAChC,OAAO,CAAC,kBAAkB,CAAC,CAc7B;AAsED,MAAM,WAAW,0BAA0B;IAC1C,4EAA4E;IAC5E,YAAY,EAAE,CAAC,MAAM,EAAE;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC;;;;OAIG;IACH,WAAW,CAAC,EAAE,0BAA0B,CAAC;CACzC;AAED,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,qBAAqB,EAC7B,IAAI,EAAE,0BAA0B,GAC9B,OAAO,CAAC,qBAAqB,CAAC,CAWhC;AAID,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACpE;;;OAGG;IACH,WAAW,CAAC,EAAE,0BAA0B,CAAC;CACzC;AAED,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,uBAAuB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAoB7B;AAID,MAAM,WAAW,wBAAwB;IACxC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF;;;OAGG;IACH,WAAW,CAAC,EAAE,0BAA0B,CAAC;CACzC;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,wBAAwB;IACxC,oDAAoD;IACpD,WAAW,CAAC,EAAE,0BAA0B,CAAC;CACzC;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,GAAE,wBAA6B,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAiB9B;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,GAAE,wBAA6B,GACjC,OAAO,CAAC,mBAAmB,CAAC,CA+B9B"}

package/dist/core/server-methods/sessions.js

@@ -0,0 +1,209 @@
+/**
+ * Sessions-related gateway method handlers (Step 25).
+ *
+ * Brand-scrubbed analogue of upstream's `src/gateway/server-methods/sessions.ts`,
+ * scoped to the four methods Brigade's sessions tool surface (Steps
+ * 19-23) actually calls:
+ *
+ *   - `sessions.list`     → enumerate live sessions
+ *   - `sessions.history`  → read JSONL transcript
+ *   - `sessions.send`     → enqueue a message into a session's lane
+ *   - `sessions.spawn`    → invoke Step 20's spawn engine
+ *
+ * Brigade scope notes:
+ *
+ *   - The handlers here are PURE — they take their params and return a
+ *     result. The transport (WebSocket / in-process) is the
+ *     `gateway-caller-impl.ts` layer's responsibility.
+ *   - Param validation is light at this milestone (the protocol layer
+ *     does the heavy AJV check before dispatch lands). Defensive coercion
+ *     prevents wild input from crashing the handler.
+ *   - `sessions.history` delegates to a `historyReader` dependency so
+ *     tests can inject a stub and the live runtime can wire to the JSONL
+ *     reader (Pi `SessionManager.readMessages` adapter).
+ *   - `sessions.send` here is a THIN passthrough — it dispatches the
+ *     inbound message into the target's lane and emits the lifecycle
+ *     event. The actual LLM turn execution is owned by Step 25's
+ *     `agent-dispatcher.ts`.
+ */
+import { dispatchAgentRun } from "../agent-dispatcher.js";
+import { listLiveSessions, } from "../../agents/session-registry.js";
+import { resolveAgentIdFromSessionKey } from "../../agents/routing/session-key.js";
+import { spawnSubagentDirect } from "../../agents/subagent-spawn.js";
+import { readSessionStore, upsertSessionEntry } from "../../sessions/session-store.js";
+/**
+ * Typed error thrown when the access guard refuses a gateway-side call.
+ * The WebSocket dispatcher reads `code` and maps it to a typed RPC error
+ * envelope (instead of the generic `internal` bucket), and in-process
+ * callers can catch on `name === "SessionsAccessForbiddenError"`.
+ */
+export class SessionsAccessForbiddenError extends Error {
+    code = "forbidden";
+    constructor(reason) {
+        super(reason);
+        this.name = "SessionsAccessForbiddenError";
+    }
+}
+function enforceAccess(check, action, targetSessionKey) {
+    if (!check)
+        return;
+    const verdict = check({ action, targetSessionKey });
+    if (verdict.allowed)
+        return;
+    throw new SessionsAccessForbiddenError(verdict.reason ?? `sessions.${action} forbidden`);
+}
+export async function handleSessionsList(params = {}, deps = {}) {
+    const live = listLiveSessions();
+    const filtered = applyFilters(live, params);
+    const visible = deps.accessCheck
+        ? filtered.filter((entry) => {
+            const verdict = deps.accessCheck({
+                action: "list",
+                targetSessionKey: entry.sessionKey,
+            });
+            return verdict.allowed;
+        })
+        : filtered;
+    const rows = visible.map((entry) => buildRow(entry, deps));
+    return { sessions: rows, count: rows.length };
+}
+function applyFilters(rows, params) {
+    let filtered = rows;
+    if (params.agentId) {
+        filtered = filtered.filter((entry) => entry.agentId === params.agentId);
+    }
+    if (params.spawnedBy) {
+        filtered = filtered.filter((entry) => typeof entry.metadata?.spawnedBy === "string" &&
+            entry.metadata.spawnedBy === params.spawnedBy);
+    }
+    if (typeof params.activeMinutes === "number" && params.activeMinutes > 0) {
+        const cutoff = Date.now() - params.activeMinutes * 60 * 1_000;
+        filtered = filtered.filter((entry) => entry.lastActivityAt >= cutoff);
+    }
+    if (typeof params.limit === "number" && params.limit > 0) {
+        filtered = filtered.slice(0, params.limit);
+    }
+    return filtered;
+}
+function buildRow(entry, deps) {
+    const base = deps.enrichRow
+        ? deps.enrichRow(entry)
+        : {
+            sessionKey: entry.sessionKey,
+            agentId: entry.agentId,
+            state: entry.state,
+            startedAt: entry.createdAt,
+            updatedAt: entry.lastActivityAt,
+        };
+    // Wave O0.7 - surface spawn lineage from the persisted session store
+    // so a `sessions_list` caller can see parent/depth without a separate
+    // metadata RPC. Read is best-effort; on any IO error we fall back to
+    // the live-registry metadata (`spawnedBy` set on dispatch).
+    if (!base.spawnedBy || base.spawnDepth === undefined) {
+        try {
+            const agentId = entry.agentId;
+            if (agentId) {
+                const store = readSessionStore(agentId);
+                const persisted = store.sessions[entry.sessionKey];
+                if (persisted?.subagent) {
+                    if (!base.spawnedBy && persisted.subagent.spawnedBy) {
+                        base.spawnedBy = persisted.subagent.spawnedBy;
+                    }
+                    if (base.spawnDepth === undefined && typeof persisted.subagent.spawnDepth === "number") {
+                        base.spawnDepth = persisted.subagent.spawnDepth;
+                    }
+                    if (!base.label && persisted.subagent.label) {
+                        base.label = persisted.subagent.label;
+                    }
+                }
+            }
+        }
+        catch {
+            // best-effort enrichment; lineage absent is non-fatal
+        }
+    }
+    // Also fall back to the live-registry metadata (set at dispatch time)
+    // for the parent key when the store-side metadata is absent.
+    if (!base.spawnedBy && typeof entry.metadata?.spawnedBy === "string") {
+        base.spawnedBy = entry.metadata.spawnedBy;
+    }
+    return base;
+}
+export async function handleSessionsHistory(params, deps) {
+    const sessionKey = params.sessionKey.trim();
+    if (!sessionKey) {
+        return { messages: [] };
+    }
+    enforceAccess(deps.accessCheck, "history", sessionKey);
+    const messages = await deps.readMessages({
+        sessionKey,
+        ...(typeof params.limit === "number" ? { limit: params.limit } : {}),
+    });
+    return { messages: messages ?? [] };
+}
+export async function handleSessionsSend(params, deps) {
+    enforceAccess(deps.accessCheck, "send", params.sessionKey);
+    const run = dispatchAgentRun({
+        sessionKey: params.sessionKey,
+        message: params.message,
+        idempotencyKey: params.idempotencyKey,
+        thinking: params.thinking,
+        timeout: typeof params.timeoutMs === "number" ? params.timeoutMs / 1_000 : undefined,
+        deliver: true,
+    }, deps);
+    // Caller pattern: respond immediately with runId; the lifecycle
+    // event-bus emits the turn-end notification when `run.settled`
+    // resolves. We DO NOT await `run.settled` here because that would
+    // block the gateway response — the caller (or subscriber on the
+    // lifecycle stream) picks up the final asynchronously.
+    void run.settled.catch(() => undefined);
+    return { ok: true, runId: run.runId };
+}
+export async function handleSessionsPatch(params, deps = {}) {
+    const sessionKey = params.sessionKey.trim();
+    if (!sessionKey) {
+        return { ok: false, created: false };
+    }
+    enforceAccess(deps.accessCheck, "patch", sessionKey);
+    const agentId = resolveAgentIdFromSessionKey(sessionKey);
+    const patch = params.patch ?? {};
+    // upsertSessionEntry reports `created=true` when the entry was minted.
+    // To know whether the entry existed BEFORE, we'd need a pre-read;
+    // today the handler approximates `created` by checking presence of
+    // `lastUsedAt` in the result vs. `createdAt` (a fresh entry has them
+    // equal). Brigade can refine if observers need stricter semantics.
+    const beforeCreate = Date.now();
+    const entry = upsertSessionEntry(agentId, sessionKey, patch);
+    const created = new Date(entry.createdAt).getTime() >= beforeCreate - 1_000;
+    return { ok: true, created, sessionId: entry.sessionId };
+}
+export async function handleSessionsSpawn(params, deps = {}) {
+    enforceAccess(deps.accessCheck, "spawn", params.parentSessionKey);
+    const callerDepth = deps.resolveCallerDepth
+        ? await deps.resolveCallerDepth({ sessionKey: params.parentSessionKey })
+        : 0;
+    const result = await spawnSubagentDirect({
+        task: params.task,
+        label: params.label,
+        agentId: params.agentId,
+        model: params.model,
+        thinking: params.thinking,
+        runTimeoutSeconds: params.runTimeoutSeconds,
+        thread: params.thread,
+        mode: params.mode,
+        cleanup: params.cleanup,
+        sandbox: params.sandbox,
+    }, {
+        agentSessionKey: params.parentSessionKey,
+        callerDepth,
+    });
+    if (result.status !== "accepted" || !result.childSessionKey || !result.runId) {
+        throw new Error(result.error ?? "spawn failed");
+    }
+    return {
+        runId: result.runId,
+        childSessionKey: result.childSessionKey,
+        mode: result.mode ?? "run",
+    };
+}
+//# sourceMappingURL=sessions.js.map

package/dist/core/server-methods/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/core/server-methods/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,gBAAgB,EAA6B,MAAM,wBAAwB,CAAC;AACrF,OAAO,EACN,gBAAgB,GAEhB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AA+BvF;;;;;GAKG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC7C,IAAI,GAAG,WAAW,CAAC;IAC5B,YAAY,MAAc;QACzB,KAAK,CAAC,MAAM,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC5C,CAAC;CACD;AAED,SAAS,aAAa,CACrB,KAA6C,EAC7C,MAAmC,EACnC,gBAAwB;IAExB,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO;IAC5B,MAAM,IAAI,4BAA4B,CACrC,OAAO,CAAC,MAAM,IAAI,YAAY,MAAM,YAAY,CAChD,CAAC;AACH,CAAC;AAiCD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,SAA6B,EAAE,EAC/B,OAAgC,EAAE;IAElC,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW;QAC/B,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAY,CAAC;gBACjC,MAAM,EAAE,MAAM;gBACd,gBAAgB,EAAE,KAAK,CAAC,UAAU;aAClC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC;QACH,CAAC,CAAC,QAAQ,CAAC;IACZ,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,IAAyB,EAAE,MAA0B;IAC1E,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CACzB,CAAC,KAAK,EAAE,EAAE,CACT,OAAO,KAAK,CAAC,QAAQ,EAAE,SAAS,KAAK,QAAQ;YAC7C,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAC9C,CAAC;IACH,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,aAAa,GAAG,EAAE,GAAG,KAAK,CAAC;QAC9D,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC1D,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwB,EAAE,IAA6B;IACxE,MAAM,IAAI,GAAmB,IAAI,CAAC,SAAS;QAC1C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;YACA,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,cAAc;SAC/B,CAAC;IACJ,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,4DAA4D;IAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACtD,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAC9B,IAAI,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACnD,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;wBACrD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAC/C,CAAC;oBACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;wBACxF,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC;oBACjD,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;wBAC7C,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACvC,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,sDAAsD;QACvD,CAAC;IACF,CAAC;IACD,sEAAsE;IACtE,6DAA6D;IAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,KAAK,CAAC,QAAQ,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,MAA6B,EAC7B,IAAgC;IAEhC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACzB,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;QACxC,UAAU;QACV,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;AACrC,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAA0B,EAC1B,IAA6B;IAE7B,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,gBAAgB,CAC3B;QACC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS;QACpF,OAAO,EAAE,IAAI;KACb,EACD,IAAI,CACJ,CAAC;IACF,gEAAgE;IAChE,+DAA+D;IAC/D,kEAAkE;IAClE,gEAAgE;IAChE,uDAAuD;IACvD,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACvC,CAAC;AAmCD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAA2B,EAC3B,OAAiC,EAAE;IAEnC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;IACjC,uEAAuE;IACvE,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,YAAY,GAAG,KAAK,CAAC;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAA2B,EAC3B,OAAiC,EAAE;IAEnC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB;QAC1C,CAAC,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACvC;QACC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;KACvB,EACD;QACC,eAAe,EAAE,MAAM,CAAC,gBAAgB;QACxC,WAAW;KACX,CACD,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;IACjD,CAAC;IACD,OAAO;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,KAAK;KAC1B,CAAC;AACH,CAAC"}

package/dist/core/server.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Brigade gateway server.
+ *
+ * Long-running headless process that owns:
+ *   - the Pi AgentSession (model, messages, tools, hooks)
+ *   - the AuthStorage + ModelRegistry
+ *   - the JSONL event log
+ *
+ * Exposes a single WebSocket endpoint on `:7777` (configurable). Clients
+ * (TUI, future web/mobile) connect, receive a state snapshot + every Pi
+ * event, and send commands as request/response frames or one-way events.
+ *
+ * Architecture:
+ *   - Raw `ws` package — no transport library, full control of the wire
+ *   - Req/Res/Event tri-frame protocol on the same connection (see protocol.ts)
+ *   - Tick heartbeat — server pushes a tick frame every TICK_INTERVAL_MS;
+ *     client closes if no frame received in 2× that. Catches dead sockets.
+ *   - Single source of truth: state lives only here. Clients hold a mirror
+ *     refreshed via the `state` event after every mutation.
+ *
+ * State persistence: server is otherwise stateless. AuthStorage / ModelRegistry
+ * / config / sessions all live on disk under `~/.brigade/`. A server crash
+ * loses only in-flight turn state; resume picks up from the last persisted
+ * Pi session entry.
+ */
+import { type ConsoleStream } from "./console-stream.js";
+export interface ServerOptions {
+    /** Port to listen on. Defaults to BRIGADE_PORT env or 7777. */
+    port?: number;
+    /** Bind address. Defaults to 127.0.0.1 — localhost only, no LAN exposure. */
+    host?: string;
+    /**
+     * Optional live-stream sink for human-readable lines on stderr. Wired by
+     * `brigade gateway --verbose` so the operator sees Pi events + WS req/res
+     * in real time without tailing the JSONL file. Pass `undefined` for the
+     * default silent behavior.
+     */
+    consoleStream?: ConsoleStream;
+}
+export interface ServerHandle {
+    port: number;
+    host: string;
+    stop(): Promise<void>;
+}
+export declare function startServer(opts?: ServerOptions): Promise<ServerHandle>;
+//# sourceMappingURL=server.d.ts.map

package/dist/core/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/core/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA+NH,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAUzD,MAAM,WAAW,aAAa;IAC7B,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;OAKG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AA8FD,wBAAsB,WAAW,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAwKjF"}