@srouterhq/server 0.0.0-stage → 0.9.0

package/dist/routes/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/routes/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,UAAU,EACV,cAAc,EACd,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC;AAEpC,+EAA+E;AAC/E,4EAA4E;AAC5E,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACzD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,GAAG,CAAC,IAAI,CAAC;QACP,OAAO,EAAE,cAAc,EAAE;QACzB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC;QAC3C,UAAU,EAAE,eAAe,EAAE;QAC7B,cAAc,EAAE,mBAAmB,EAAE;QACrC,GAAG,KAAK;QACR,WAAW,EAAE,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,qBAAqB;KACnE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,4EAA4E;AAC5E,kCAAkC;AAClC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACzD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,UAAU,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;QACxC,UAAU,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,qCAAqC,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;QACnH,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACvD,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC"}

package/dist/routes/client-profiles.d.ts

@@ -0,0 +1,2 @@
+export declare const clientProfilesRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=client-profiles.d.ts.map

package/dist/routes/client-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-profiles.d.ts","sourceRoot":"","sources":["../../src/routes/client-profiles.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,oBAAoB,4CAAW,CAAC"}

package/dist/routes/client-profiles.js

@@ -0,0 +1,128 @@
+import { Router } from 'express';
+import { z } from 'zod';
+import { getDb } from '../db/index.js';
+import { encrypt, decrypt, maskKey } from '../lib/crypto.js';
+import { mintClientProfileKey, hashClientProfileKey } from '../lib/system-prompt.js';
+// Client-profile CRUD (#411), mounted under /api/client-profiles behind the
+// dashboard session gate like every other admin route. The full `sk-cp-...`
+// key is returned exactly once — from create and rotate; the list endpoint
+// only ever shows the masked form (rendered from the encrypted copy, since
+// the auth path stores nothing but a hash).
+export const clientProfilesRouter = Router();
+const MAX_NAME_LEN = 100;
+// Generous ceiling — a system prompt is configuration, not a document.
+const MAX_PROMPT_LEN = 32_000;
+const createSchema = z.object({
+    name: z.string().trim().min(1).max(MAX_NAME_LEN),
+    systemPrompt: z.string().max(MAX_PROMPT_LEN).nullish(),
+});
+const updateSchema = z.object({
+    name: z.string().trim().min(1).max(MAX_NAME_LEN).optional(),
+    // null clears the prompt (the profile key then authenticates without
+    // injecting anything); absent leaves it untouched.
+    systemPrompt: z.string().max(MAX_PROMPT_LEN).nullable().optional(),
+    enabled: z.boolean().optional(),
+});
+function maskedKeyFor(row) {
+    try {
+        return maskKey(decrypt(row.encrypted_key, row.iv, row.auth_tag));
+    }
+    catch {
+        return '[decrypt failed]';
+    }
+}
+function toJson(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        maskedKey: maskedKeyFor(row),
+        systemPrompt: row.system_prompt,
+        enabled: row.enabled === 1,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+function getProfile(id) {
+    return getDb().prepare('SELECT * FROM client_profiles WHERE id = ?').get(id);
+}
+function parseId(req, res) {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id) || id <= 0) {
+        res.status(400).json({ error: { message: 'Invalid profile id' } });
+        return null;
+    }
+    return id;
+}
+function notFound(res) {
+    res.status(404).json({ error: { message: 'Client profile not found' } });
+}
+clientProfilesRouter.get('/', (_req, res) => {
+    const rows = getDb().prepare('SELECT * FROM client_profiles ORDER BY id').all();
+    res.json(rows.map(toJson));
+});
+clientProfilesRouter.post('/', (req, res) => {
+    const parsed = createSchema.safeParse(req.body);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: 'A profile name is required' } });
+        return;
+    }
+    const key = mintClientProfileKey();
+    const { encrypted, iv, authTag } = encrypt(key);
+    const prompt = parsed.data.systemPrompt?.trim() || null;
+    const info = getDb().prepare(`
+    INSERT INTO client_profiles (name, token_hash, encrypted_key, iv, auth_tag, system_prompt)
+    VALUES (?, ?, ?, ?, ?, ?)
+  `).run(parsed.data.name, hashClientProfileKey(key), encrypted, iv, authTag, prompt);
+    const row = getProfile(Number(info.lastInsertRowid));
+    // The only time the full key leaves the server (besides rotate).
+    res.status(201).json({ ...toJson(row), key });
+});
+clientProfilesRouter.patch('/:id', (req, res) => {
+    const id = parseId(req, res);
+    if (id === null)
+        return;
+    const parsed = updateSchema.safeParse(req.body);
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: 'Invalid profile update' } });
+        return;
+    }
+    const row = getProfile(id);
+    if (!row)
+        return notFound(res);
+    const { name, systemPrompt, enabled } = parsed.data;
+    const nextPrompt = systemPrompt === undefined
+        ? row.system_prompt
+        : (systemPrompt?.trim() || null);
+    getDb().prepare(`
+    UPDATE client_profiles
+    SET name = ?, system_prompt = ?, enabled = ?, updated_at = datetime('now')
+    WHERE id = ?
+  `).run(name ?? row.name, nextPrompt, enabled === undefined ? row.enabled : (enabled ? 1 : 0), id);
+    res.json(toJson(getProfile(id)));
+});
+clientProfilesRouter.post('/:id/rotate', (req, res) => {
+    const id = parseId(req, res);
+    if (id === null)
+        return;
+    const row = getProfile(id);
+    if (!row)
+        return notFound(res);
+    const key = mintClientProfileKey();
+    const { encrypted, iv, authTag } = encrypt(key);
+    getDb().prepare(`
+    UPDATE client_profiles
+    SET token_hash = ?, encrypted_key = ?, iv = ?, auth_tag = ?, updated_at = datetime('now')
+    WHERE id = ?
+  `).run(hashClientProfileKey(key), encrypted, iv, authTag, id);
+    res.json({ ...toJson(getProfile(id)), key });
+});
+clientProfilesRouter.delete('/:id', (req, res) => {
+    const id = parseId(req, res);
+    if (id === null)
+        return;
+    const info = getDb().prepare('DELETE FROM client_profiles WHERE id = ?').run(id);
+    if (info.changes === 0)
+        return notFound(res);
+    res.json({ success: true });
+});
+//# sourceMappingURL=client-profiles.js.map

package/dist/routes/client-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-profiles.js","sourceRoot":"","sources":["../../src/routes/client-profiles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAErF,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAC3E,2EAA2E;AAC3E,4CAA4C;AAE5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,EAAE,CAAC;AAE7C,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,uEAAuE;AACvE,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE;CACvD,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IAC3D,qEAAqE;IACrE,mDAAmD;IACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAcH,SAAS,YAAY,CAAC,GAA0D;IAC9E,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAe;IAC7B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC;QAC5B,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,CAAC;QAC1B,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,KAAK,EAAE,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,CAAC,EAAE,CAA2B,CAAC;AACzG,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,GAAa;IAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa;IAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,oBAAoB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,EAAkB,CAAC;IAChG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,EAAE,CAAC,CAAC;QAC3E,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACnC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC;;;GAG5B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAE,CAAC;IACtD,iEAAiE;IACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACpD,MAAM,UAAU,GAAG,YAAY,KAAK,SAAS;QAC3C,CAAC,CAAC,GAAG,CAAC,aAAa;QACnB,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;IACnC,KAAK,EAAE,CAAC,OAAO,CAAC;;;;GAIf,CAAC,CAAC,GAAG,CACJ,IAAI,IAAI,GAAG,CAAC,IAAI,EAChB,UAAU,EACV,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACvD,EAAE,CACH,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,oBAAoB,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACvE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;IACnC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,KAAK,EAAE,CAAC,OAAO,CAAC;;;;GAIf,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,CAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAClE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/routes/compression.d.ts

@@ -0,0 +1,2 @@
+export declare const compressionRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=compression.d.ts.map

package/dist/routes/compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../../src/routes/compression.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,iBAAiB,4CAAW,CAAC"}

package/dist/routes/compression.js

@@ -0,0 +1,82 @@
+import { Router } from 'express';
+import { z } from 'zod';
+import { COMPRESSION_MODES } from '../services/compression/types.js';
+import { compressRequest } from '../services/compression/pipeline.js';
+import { getCompressionConfig } from '../services/compression/config.js';
+import { getCompressionStats } from '../services/compression/stats.js';
+export const compressionRouter = Router();
+const previewMessageSchema = z.object({
+    role: z.enum(['system', 'user', 'assistant', 'tool']),
+    content: z.union([
+        z.string(),
+        z.null(),
+        z.array(z.union([z.string(), z.record(z.string(), z.unknown())])),
+    ]),
+    name: z.string().optional(),
+    tool_call_id: z.string().optional(),
+    tool_calls: z.array(z.object({
+        id: z.string(),
+        type: z.literal('function'),
+        function: z.object({ name: z.string(), arguments: z.string() }),
+    }).passthrough()).optional(),
+}).passthrough();
+compressionRouter.get('/stats', (_req, res) => {
+    res.json({ config: getCompressionConfig(), ...getCompressionStats() });
+});
+function previewMessages(body) {
+    if (typeof body === 'string')
+        return [{ role: 'user', content: body }];
+    if (!body || typeof body !== 'object')
+        return null;
+    const value = body;
+    if (Array.isArray(value.messages)) {
+        const parsed = z.array(previewMessageSchema).safeParse(value.messages);
+        return parsed.success ? parsed.data : null;
+    }
+    if (typeof value.body === 'string')
+        return [{ role: 'user', content: value.body }];
+    if (value.body && typeof value.body === 'object' && Array.isArray(value.body.messages)) {
+        const parsed = z.array(previewMessageSchema).safeParse(value.body.messages);
+        return parsed.success ? parsed.data : null;
+    }
+    return null;
+}
+compressionRouter.post('/preview', (req, res) => {
+    const messages = previewMessages(req.body);
+    if (!messages || messages.length === 0) {
+        res.status(400).json({
+            error: {
+                message: 'Preview requires `messages`, a request `body` containing messages, or a string `body`.',
+                type: 'invalid_request_error',
+            },
+        });
+        return;
+    }
+    const rawMode = req.body?.mode;
+    const mode = typeof rawMode === 'string'
+        && COMPRESSION_MODES.includes(rawMode)
+        ? rawMode
+        : getCompressionConfig().mode;
+    const targetTokens = req.body?.targetTokens;
+    const tools = Array.isArray(req.body?.tools)
+        ? req.body.tools
+        : undefined;
+    const result = compressRequest(messages, {
+        previewMode: mode,
+        targetTokens: typeof targetTokens === 'number' && targetTokens > 0 ? Math.floor(targetTokens) : undefined,
+        tools,
+        recordStats: false,
+    });
+    res.json({
+        mode: result.mode,
+        original: messages,
+        compressed: result.messages,
+        diff: {
+            beforeChars: result.stats.originalChars,
+            afterChars: result.stats.compressedChars,
+            savedChars: result.stats.originalChars - result.stats.compressedChars,
+        },
+        stats: result.stats,
+    });
+});
+//# sourceMappingURL=compression.js.map

package/dist/routes/compression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.js","sourceRoot":"","sources":["../../src/routes/compression.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAwB,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEvE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC;AAE1C,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,MAAM,EAAE;QACV,CAAC,CAAC,IAAI,EAAE;QACR,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;KAClE,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;KAChE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,GAAG,mBAAmB,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,KAAK,CAAC,IAAgC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpH,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,SAAS,CAAE,KAAK,CAAC,IAAgC,CAAC,QAAQ,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAqB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iBAAiB,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE;gBACL,OAAO,EAAE,wFAAwF;gBACjG,IAAI,EAAE,uBAAuB;aAC9B;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAI,GAAG,CAAC,IAA2B,EAAE,IAAI,CAAC;IACvD,MAAM,IAAI,GAAoB,OAAO,OAAO,KAAK,QAAQ;WACnD,iBAAuC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC3D,CAAC,CAAC,OAA0B;QAC5B,CAAC,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC;IAClC,MAAM,YAAY,GAAI,GAAG,CAAC,IAAmC,EAAE,YAAY,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAE,GAAG,CAAC,IAA4B,EAAE,KAAK,CAAC;QACnE,CAAC,CAAE,GAAG,CAAC,IAAwC,CAAC,KAAK;QACrD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE;QACvC,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QACzG,KAAK;QACL,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC;QACP,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,MAAM,CAAC,QAAQ;QAC3B,IAAI,EAAE;YACJ,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACvC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe;YACxC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe;SACtE;QACD,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/routes/conversations.d.ts

@@ -0,0 +1,3 @@
+export declare const conversationsRouter: import("express-serve-static-core").Router;
+export declare const MAX_MESSAGES_BYTES: number;
+//# sourceMappingURL=conversations.d.ts.map

package/dist/routes/conversations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversations.d.ts","sourceRoot":"","sources":["../../src/routes/conversations.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,mBAAmB,4CAAW,CAAC;AAO5C,eAAO,MAAM,kBAAkB,QAAkB,CAAC"}

package/dist/routes/conversations.js

@@ -0,0 +1,215 @@
+import { Router } from 'express';
+import { z } from 'zod';
+import { getDb } from '../db/index.js';
+// Playground conversation storage, mounted under /api/conversations behind the
+// dashboard session gate like every other admin route. The Playground page is
+// the only client: it lists conversations in its sidebar (summaries, no
+// bodies), loads one when you switch to it, and PUTs the whole transcript back
+// after each completed exchange.
+//
+// The transcript is stored as the client's own ChatMessage[] — `meta` routing
+// info and `reasoning` included — so a restored conversation renders exactly
+// like the live one. Validation is therefore shape-checking, not
+// normalisation: unknown keys are stripped, everything the page draws survives.
+export const conversationsRouter = Router();
+const MAX_TITLE_LEN = 200;
+// A conversation is prose plus, occasionally, inlined image data URIs. 2 MB of
+// serialised JSON is far more than any readable chat and still small enough to
+// hand back on every switch without thinking about it. Over that we refuse the
+// write rather than silently truncating someone's history.
+export const MAX_MESSAGES_BYTES = 2 * 1024 * 1024;
+// Mirrors the client's ChatMessage. Kept permissive on `content` (an empty
+// assistant bubble is legitimate mid-fusion) and strict on `role`, which is the
+// one field the renderer branches on.
+const metaSchema = z.object({
+    platform: z.string().optional(),
+    model: z.string().optional(),
+    latency: z.number().optional(),
+    fallbackAttempts: z.number().optional(),
+    fusionPanel: z.array(z.object({
+        platform: z.string(),
+        model: z.string(),
+        status: z.enum(['ok', 'failed']).optional(),
+        content: z.string().optional(),
+        error: z.string().optional(),
+    })).optional(),
+    fusionJudge: z.object({ platform: z.string(), model: z.string() }).nullable().optional(),
+});
+const messageSchema = z.object({
+    role: z.enum(['user', 'assistant']),
+    content: z.string(),
+    images: z.array(z.string()).optional(),
+    isError: z.boolean().optional(),
+    reasoning: z.string().optional(),
+    meta: metaSchema.optional(),
+});
+// `streaming: true` is deliberately absent above (and so stripped): a stored
+// message is finished by definition, and persisting the flag would restore a
+// transcript stuck mid-answer.
+const messagesSchema = z.array(messageSchema);
+// 'auto', 'fusion', or a canonical model id — whatever the picker held. Not
+// enumerated: the catalog changes under us, and a conversation pinned to a
+// model that has since gone away should still load.
+const modelSchema = z.string().max(200).nullable();
+const systemPromptSchema = z.string().max(32_000).nullable();
+const createSchema = z.object({
+    title: z.string().max(MAX_TITLE_LEN).optional(),
+    messages: messagesSchema.optional(),
+    model: modelSchema.optional(),
+    systemPrompt: systemPromptSchema.optional(),
+}).strict();
+// PUT is a full upsert of the mutable state: every field the page owns, written
+// in one statement. Fields left out keep their stored value, so a rename does
+// not have to re-send the transcript (and cannot race one away).
+const updateSchema = z.object({
+    title: z.string().max(MAX_TITLE_LEN).optional(),
+    messages: messagesSchema.optional(),
+    model: modelSchema.optional(),
+    systemPrompt: systemPromptSchema.optional(),
+}).strict();
+function toJson(row) {
+    return {
+        id: row.id,
+        title: row.title,
+        // Stored JSON is only ever written from a validated array, so a parse
+        // failure means the row was corrupted outside this router: hand back an
+        // empty transcript rather than 500-ing the whole sidebar.
+        messages: parseMessages(row.messages_json),
+        model: row.model,
+        systemPrompt: row.system_prompt,
+        createdAt: row.created_at_ms,
+        updatedAt: row.updated_at_ms,
+    };
+}
+function parseMessages(json) {
+    try {
+        const parsed = JSON.parse(json);
+        return Array.isArray(parsed) ? parsed : [];
+    }
+    catch {
+        return [];
+    }
+}
+function getConversation(id) {
+    return getDb()
+        .prepare('SELECT * FROM playground_conversations WHERE id = ?')
+        .get(id);
+}
+function parseId(req, res) {
+    const id = Number(req.params.id);
+    if (!Number.isInteger(id) || id <= 0) {
+        res.status(400).json({ error: { message: 'Invalid conversation id' } });
+        return null;
+    }
+    return id;
+}
+function notFound(res) {
+    res.status(404).json({ error: { message: 'Conversation not found' } });
+}
+/**
+ * Serialise a validated transcript, refusing anything past the storage cap.
+ * Returns null after answering with a 413 so callers can `return` on it.
+ */
+function serialiseMessages(messages, res) {
+    const json = JSON.stringify(messages);
+    const bytes = Buffer.byteLength(json, 'utf8');
+    if (bytes > MAX_MESSAGES_BYTES) {
+        res.status(413).json({
+            error: {
+                message: `Conversation is too large to save (${Math.round(bytes / 1024)} KB; the limit is ` +
+                    `${Math.round(MAX_MESSAGES_BYTES / 1024)} KB). Start a new conversation to keep going.`,
+                type: 'conversation_too_large',
+            },
+        });
+        return null;
+    }
+    return json;
+}
+// Summaries for the sidebar: no message bodies cross the wire, so the list stays
+// small no matter how long the conversations are. json_array_length reads the
+// count straight out of the stored blob (SQLite's JSON1, present in both the
+// better-sqlite3 and node:sqlite drivers) instead of parsing every transcript.
+conversationsRouter.get('/', (_req, res) => {
+    const rows = getDb().prepare(`
+    SELECT id,
+           title,
+           model,
+           json_array_length(messages_json) AS message_count,
+           created_at_ms,
+           updated_at_ms
+      FROM playground_conversations
+     ORDER BY updated_at_ms DESC, id DESC
+  `).all();
+    res.json(rows.map(row => ({
+        id: row.id,
+        title: row.title,
+        model: row.model,
+        messageCount: row.message_count ?? 0,
+        createdAt: row.created_at_ms,
+        updatedAt: row.updated_at_ms,
+    })));
+});
+conversationsRouter.get('/:id', (req, res) => {
+    const id = parseId(req, res);
+    if (id === null)
+        return;
+    const row = getConversation(id);
+    if (!row)
+        return notFound(res);
+    res.json(toJson(row));
+});
+conversationsRouter.post('/', (req, res) => {
+    const parsed = createSchema.safeParse(req.body ?? {});
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: 'Invalid conversation' } });
+        return;
+    }
+    const messagesJson = serialiseMessages(parsed.data.messages ?? [], res);
+    if (messagesJson === null)
+        return;
+    const now = Date.now();
+    const info = getDb().prepare(`
+    INSERT INTO playground_conversations
+      (title, messages_json, model, system_prompt, created_at_ms, updated_at_ms)
+    VALUES (?, ?, ?, ?, ?, ?)
+  `).run(parsed.data.title ?? '', messagesJson, parsed.data.model ?? null, parsed.data.systemPrompt ?? null, now, now);
+    res.status(201).json(toJson(getConversation(Number(info.lastInsertRowid))));
+});
+conversationsRouter.put('/:id', (req, res) => {
+    const id = parseId(req, res);
+    if (id === null)
+        return;
+    const parsed = updateSchema.safeParse(req.body ?? {});
+    if (!parsed.success) {
+        res.status(400).json({ error: { message: 'Invalid conversation update' } });
+        return;
+    }
+    const row = getConversation(id);
+    if (!row)
+        return notFound(res);
+    const { title, messages, model, systemPrompt } = parsed.data;
+    const messagesJson = messages === undefined
+        ? row.messages_json
+        : serialiseMessages(messages, res);
+    if (messagesJson === null)
+        return;
+    // One statement for the whole conversation: title, transcript, model and
+    // system prompt always move together, so a save can never leave a row half
+    // updated (the transcript of one exchange under the title of another).
+    getDb().prepare(`
+    UPDATE playground_conversations
+       SET title = ?, messages_json = ?, model = ?, system_prompt = ?, updated_at_ms = ?
+     WHERE id = ?
+  `).run(title ?? row.title, messagesJson, model === undefined ? row.model : model, systemPrompt === undefined ? row.system_prompt : systemPrompt, Date.now(), id);
+    res.json(toJson(getConversation(id)));
+});
+conversationsRouter.delete('/:id', (req, res) => {
+    const id = parseId(req, res);
+    if (id === null)
+        return;
+    const info = getDb().prepare('DELETE FROM playground_conversations WHERE id = ?').run(id);
+    if (info.changes === 0)
+        return notFound(res);
+    res.json({ success: true });
+});
+//# sourceMappingURL=conversations.js.map

package/dist/routes/conversations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversations.js","sourceRoot":"","sources":["../../src/routes/conversations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,+EAA+E;AAC/E,8EAA8E;AAC9E,wEAAwE;AACxE,+EAA+E;AAC/E,iCAAiC;AACjC,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,iEAAiE;AACjE,gFAAgF;AAEhF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,EAAE,CAAC;AAE5C,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,2EAA2E;AAC3E,gFAAgF;AAChF,sCAAsC;AACtC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzF,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AACH,6EAA6E;AAC7E,6EAA6E;AAC7E,+BAA+B;AAE/B,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;AAE9C,4EAA4E;AAC5E,2EAA2E;AAC3E,oDAAoD;AACpD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AACnD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE7D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,gFAAgF;AAChF,8EAA8E;AAC9E,iEAAiE;AACjE,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAqBZ,SAAS,MAAM,CAAC,GAAoB;IAClC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,sEAAsE;QACtE,wEAAwE;QACxE,0DAA0D;QAC1D,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,aAAa;QAC5B,SAAS,EAAE,GAAG,CAAC,aAAa;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,OAAO,KAAK,EAAE;SACX,OAAO,CAAC,qDAAqD,CAAC;SAC9D,GAAG,CAAC,EAAE,CAAgC,CAAC;AAC5C,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,GAAa;IAC1C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,GAAa;IAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,wBAAwB,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,QAAmB,EAAE,GAAa;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,IAAI,KAAK,GAAG,kBAAkB,EAAE,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,KAAK,EAAE;gBACL,OAAO,EACL,sCAAsC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,oBAAoB;oBAClF,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,+CAA+C;gBACzF,IAAI,EAAE,wBAAwB;aAC/B;SACF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,8EAA8E;AAC9E,6EAA6E;AAC7E,+EAA+E;AAC/E,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC5D,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC;;;;;;;;;GAS5B,CAAC,CAAC,GAAG,EAAkB,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,CAAC;QACpC,SAAS,EAAE,GAAG,CAAC,aAAa;QAC5B,SAAS,EAAE,GAAG,CAAC,aAAa;KAC7B,CAAC,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACxE,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC;;;;GAI5B,CAAC,CAAC,GAAG,CACJ,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,EACvB,YAAY,EACZ,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,EACzB,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,EAChC,GAAG,EACH,GAAG,CACJ,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAE,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9D,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE/B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7D,MAAM,YAAY,GAAG,QAAQ,KAAK,SAAS;QACzC,CAAC,CAAC,GAAG,CAAC,aAAa;QACnB,CAAC,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO;IAElC,yEAAyE;IACzE,2EAA2E;IAC3E,uEAAuE;IACvE,KAAK,EAAE,CAAC,OAAO,CAAC;;;;GAIf,CAAC,CAAC,GAAG,CACJ,KAAK,IAAI,GAAG,CAAC,KAAK,EAClB,YAAY,EACZ,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EACvC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,EAC7D,IAAI,CAAC,GAAG,EAAE,EACV,EAAE,CACH,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACjE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7B,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO;IACxB,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC"}

package/dist/routes/docs.d.ts

@@ -0,0 +1,2 @@
+export declare const docsRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=docs.d.ts.map

package/dist/routes/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/routes/docs.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,UAAU,4CAAW,CAAC"}

package/dist/routes/docs.js

@@ -0,0 +1,21 @@
+import { Router } from 'express';
+import { openapiSpec } from '../docs/openapi.js';
+import { DOCS_HTML } from '../docs/docs-page.js';
+// Static, unauthenticated API reference for the public `/v1` surface:
+//   GET /v1/openapi.json  — the OpenAPI 3.0 spec (served as JSON)
+//   GET /v1/docs          — a self-contained viewer that renders that spec
+//
+// Both are static and expose no secrets, so they are intentionally not gated by
+// the unified API key. Mounted before the proxy rate limiter in app.ts so the
+// docs stay available and never consume a caller's request budget.
+export const docsRouter = Router();
+docsRouter.get('/openapi.json', (_req, res) => {
+    // Long-cacheable: the spec only changes when the server binary does.
+    res.setHeader('Cache-Control', 'public, max-age=3600');
+    res.json(openapiSpec);
+});
+docsRouter.get('/docs', (_req, res) => {
+    res.setHeader('Cache-Control', 'public, max-age=3600');
+    res.type('html').send(DOCS_HTML);
+});
+//# sourceMappingURL=docs.js.map

package/dist/routes/docs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.js","sourceRoot":"","sources":["../../src/routes/docs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+B,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,sEAAsE;AACtE,kEAAkE;AAClE,2EAA2E;AAC3E,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC;AAEnC,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IAC/D,qEAAqE;IACrE,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;IACvD,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC,CAAC,CAAC"}

package/dist/routes/embeddings.d.ts

@@ -0,0 +1,2 @@
+export declare const embeddingsRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=embeddings.d.ts.map

package/dist/routes/embeddings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"embeddings.d.ts","sourceRoot":"","sources":["../../src/routes/embeddings.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,gBAAgB,4CAAW,CAAC"}