@taico/taico 0.1.0 → 0.2.0

package/dist/worker/auth/callback-server.d.ts

@@ -0,0 +1,6 @@
+export declare function createOAuthCallbackServer(): Promise<{
+    redirectUri: string;
+    waitForCode: (expectedState: string) => Promise<{
+        code: string;
+    }>;
+}>;

package/dist/worker/auth/callback-server.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOAuthCallbackServer = createOAuthCallbackServer;
+const http_1 = require("http");
+async function createOAuthCallbackServer() {
+    const server = (0, http_1.createServer)();
+    let pendingResolve = null;
+    server.on('request', (req, res) => {
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const code = url.searchParams.get('code');
+        const state = url.searchParams.get('state');
+        if (!code || !state) {
+            res.statusCode = 400;
+            res.end('Missing code or state');
+            return;
+        }
+        res.statusCode = 200;
+        res.end('Taico worker authorization completed. You can close this tab.');
+        if (pendingResolve) {
+            pendingResolve({ code, state });
+            pendingResolve = null;
+        }
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(0, '127.0.0.1', () => {
+            server.off('error', reject);
+            resolve();
+        });
+    });
+    const address = server.address();
+    if (!address || typeof address === 'string') {
+        throw new Error('Failed to bind local callback server');
+    }
+    const redirectUri = `http://127.0.0.1:${address.port}/callback`;
+    return {
+        redirectUri,
+        waitForCode: async (expectedState) => {
+            const result = await new Promise((resolve) => {
+                pendingResolve = resolve;
+            });
+            server.close();
+            if (result.state !== expectedState) {
+                throw new Error('OAuth callback state mismatch');
+            }
+            return { code: result.code };
+        },
+    };
+}
+//# sourceMappingURL=callback-server.js.map

package/dist/worker/auth/callback-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback-server.js","sourceRoot":"","sources":["../../../src/worker/auth/callback-server.ts"],"names":[],"mappings":";;AAEA,8DA2DC;AA7DD,+BAAoC;AAE7B,KAAK,UAAU,yBAAyB;IAI7C,MAAM,MAAM,GAAG,IAAA,mBAAY,GAAE,CAAC;IAC9B,IAAI,cAAc,GAEP,IAAI,CAAC;IAEhB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACpB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAEzE,IAAI,cAAc,EAAE,CAAC;YACnB,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChC,cAAc,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;YACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,OAAO,CAAC,IAAI,WAAW,CAAC;IAEhE,OAAO;QACL,WAAW;QACX,WAAW,EAAE,KAAK,EAAE,aAAqB,EAAE,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAC9B,CAAC,OAAO,EAAE,EAAE;gBACV,cAAc,GAAG,OAAO,CAAC;YAC3B,CAAC,CACF,CAAC;YACF,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/worker/auth/credentials-store.d.ts

@@ -0,0 +1,4 @@
+import type { WorkerCredentials } from './worker-auth.types';
+export declare const DEFAULT_WORKER_CREDENTIALS_PATH: string;
+export declare function readWorkerCredentials(credentialsPath: string): Promise<WorkerCredentials | null>;
+export declare function writeWorkerCredentials(credentialsPath: string, credentials: WorkerCredentials): Promise<void>;

package/dist/worker/auth/credentials-store.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_WORKER_CREDENTIALS_PATH = void 0;
+exports.readWorkerCredentials = readWorkerCredentials;
+exports.writeWorkerCredentials = writeWorkerCredentials;
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const os_1 = require("os");
+exports.DEFAULT_WORKER_CREDENTIALS_PATH = (0, path_1.join)((0, os_1.homedir)(), '.taico', 'worker-credentials.json');
+async function readWorkerCredentials(credentialsPath) {
+    try {
+        const content = await (0, promises_1.readFile)(credentialsPath, 'utf8');
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+async function writeWorkerCredentials(credentialsPath, credentials) {
+    await (0, promises_1.mkdir)((0, path_1.dirname)(credentialsPath), { recursive: true });
+    await (0, promises_1.writeFile)(credentialsPath, JSON.stringify(credentials, null, 2), 'utf8');
+}
+//# sourceMappingURL=credentials-store.js.map

package/dist/worker/auth/credentials-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-store.js","sourceRoot":"","sources":["../../../src/worker/auth/credentials-store.ts"],"names":[],"mappings":";;;AAWA,sDASC;AAED,wDAMC;AA5BD,0CAAyD;AACzD,+BAAqC;AACrC,2BAA6B;AAGhB,QAAA,+BAA+B,GAAG,IAAA,WAAI,EACjD,IAAA,YAAO,GAAE,EACT,QAAQ,EACR,yBAAyB,CAC1B,CAAC;AAEK,KAAK,UAAU,qBAAqB,CACzC,eAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAC1C,eAAuB,EACvB,WAA8B;IAE9B,MAAM,IAAA,gBAAK,EAAC,IAAA,cAAO,EAAC,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAA,oBAAS,EAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACjF,CAAC"}

package/dist/worker/auth/oauth-client.d.ts

@@ -0,0 +1,4 @@
+import type { AuthorizationServerMetadata, WorkerCredentials } from './worker-auth.types';
+export declare function discoverAuthorizationServer(serverUrl: string): Promise<AuthorizationServerMetadata>;
+export declare function bootstrapWorkerAuthorization(serverUrl: string, metadata: AuthorizationServerMetadata): Promise<WorkerCredentials>;
+export declare function refreshWorkerToken(credentials: WorkerCredentials): Promise<WorkerCredentials>;

package/dist/worker/auth/oauth-client.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.discoverAuthorizationServer = discoverAuthorizationServer;
+exports.bootstrapWorkerAuthorization = bootstrapWorkerAuthorization;
+exports.refreshWorkerToken = refreshWorkerToken;
+const crypto_1 = require("crypto");
+const internal_auth_target_constant_1 = require("../../auth/core/constants/internal-auth-target.constant");
+const callback_server_1 = require("./callback-server");
+const WORKER_AUTH_VERSION = '0.0.0';
+const WORKER_SCOPE = internal_auth_target_constant_1.INTERNAL_WORKER_AUTH_SCOPES.map((scope) => scope.id).join(' ');
+async function discoverAuthorizationServer(serverUrl) {
+    const discoveryUrl = `${serverUrl}/.well-known/oauth-authorization-server/mcp/${internal_auth_target_constant_1.INTERNAL_WORKER_AUTH_TARGET_ID}/${WORKER_AUTH_VERSION}`;
+    const response = await fetch(discoveryUrl);
+    if (!response.ok) {
+        throw new Error(`Failed to discover authorization server metadata: ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+}
+async function bootstrapWorkerAuthorization(serverUrl, metadata) {
+    const callback = await (0, callback_server_1.createOAuthCallbackServer)();
+    const redirectUri = callback.redirectUri;
+    const codeVerifier = (0, crypto_1.randomBytes)(32).toString('base64url');
+    const codeChallenge = (0, crypto_1.createHash)('sha256')
+        .update(codeVerifier)
+        .digest('base64url');
+    const registrationResponse = await fetch(metadata.registration_endpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            client_name: `Taico Worker (${process.pid})`,
+            redirect_uris: [redirectUri],
+            grant_types: ['authorization_code', 'refresh_token'],
+            response_types: ['code'],
+            token_endpoint_auth_method: 'none',
+            scope: WORKER_SCOPE,
+        }),
+    });
+    if (!registrationResponse.ok) {
+        throw new Error(`Failed to register worker client: ${registrationResponse.status} ${registrationResponse.statusText}`);
+    }
+    const registration = (await registrationResponse.json());
+    const state = (0, crypto_1.randomBytes)(16).toString('base64url');
+    const authorizationUrl = new URL(metadata.authorization_endpoint);
+    authorizationUrl.searchParams.set('response_type', 'code');
+    authorizationUrl.searchParams.set('client_id', registration.client_id);
+    authorizationUrl.searchParams.set('redirect_uri', redirectUri);
+    authorizationUrl.searchParams.set('scope', WORKER_SCOPE);
+    authorizationUrl.searchParams.set('state', state);
+    authorizationUrl.searchParams.set('code_challenge', codeChallenge);
+    authorizationUrl.searchParams.set('code_challenge_method', 'S256');
+    authorizationUrl.searchParams.set('resource', `${serverUrl}/api/v1`);
+    console.log('[worker] Open this URL in your browser to authorize the worker:');
+    console.log(authorizationUrl.toString());
+    const callbackResult = await callback.waitForCode(state);
+    const tokenResponse = await exchangeAuthorizationCode(metadata.token_endpoint, {
+        clientId: registration.client_id,
+        code: callbackResult.code,
+        redirectUri,
+        codeVerifier,
+    });
+    return {
+        serverUrl,
+        clientId: registration.client_id,
+        redirectUri,
+        scope: tokenResponse.scope ?? WORKER_SCOPE,
+        tokenEndpoint: metadata.token_endpoint,
+        authorizationEndpoint: metadata.authorization_endpoint,
+        registrationEndpoint: metadata.registration_endpoint,
+        accessToken: tokenResponse.access_token,
+        refreshToken: tokenResponse.refresh_token ?? '',
+        expiresAt: computeExpirationIso(tokenResponse.expires_in),
+    };
+}
+async function refreshWorkerToken(credentials) {
+    const response = await fetch(credentials.tokenEndpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            grant_type: 'refresh_token',
+            client_id: credentials.clientId,
+            refresh_token: credentials.refreshToken,
+        }),
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to refresh worker token: ${response.status} ${response.statusText}`);
+    }
+    const payload = (await response.json());
+    return {
+        ...credentials,
+        accessToken: payload.access_token,
+        refreshToken: payload.refresh_token ?? credentials.refreshToken,
+        expiresAt: computeExpirationIso(payload.expires_in),
+        scope: payload.scope ?? credentials.scope,
+    };
+}
+async function exchangeAuthorizationCode(tokenEndpoint, input) {
+    const response = await fetch(tokenEndpoint, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+            grant_type: 'authorization_code',
+            client_id: input.clientId,
+            code: input.code,
+            redirect_uri: input.redirectUri,
+            code_verifier: input.codeVerifier,
+        }),
+    });
+    if (!response.ok) {
+        throw new Error(`Failed to exchange authorization code: ${response.status} ${response.statusText}`);
+    }
+    return response.json();
+}
+function computeExpirationIso(expiresInSeconds) {
+    return new Date(Date.now() + expiresInSeconds * 1000).toISOString();
+}
+//# sourceMappingURL=oauth-client.js.map

package/dist/worker/auth/oauth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../../../src/worker/auth/oauth-client.ts"],"names":[],"mappings":";;AAiBA,kEAaC;AAED,oEAoEC;AAED,gDA4BC;AAlID,mCAAiD;AACjD,2GAGiE;AACjE,uDAA8D;AAO9D,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,MAAM,YAAY,GAAG,2DAA2B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAC5E,GAAG,CACJ,CAAC;AAEK,KAAK,UAAU,2BAA2B,CAC/C,SAAiB;IAEjB,MAAM,YAAY,GAAG,GAAG,SAAS,+CAA+C,8DAA8B,IAAI,mBAAmB,EAAE,CAAC;IACxI,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;IAE3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,qDAAqD,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA0C,CAAC;AACjE,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,SAAiB,EACjB,QAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,IAAA,2CAAyB,GAAE,CAAC;IACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,MAAM,YAAY,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;SACvC,MAAM,CAAC,YAAY,CAAC;SACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IAEvB,MAAM,oBAAoB,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE;QACvE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAE,iBAAiB,OAAO,CAAC,GAAG,GAAG;YAC5C,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,WAAW,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YACpD,cAAc,EAAE,CAAC,MAAM,CAAC;YACxB,0BAA0B,EAAE,MAAM;YAClC,KAAK,EAAE,YAAY;SACpB,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,qCAAqC,oBAAoB,CAAC,MAAM,IAAI,oBAAoB,CAAC,UAAU,EAAE,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,CAEtD,CAAC;IAEF,MAAM,KAAK,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAClE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACvE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC/D,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzD,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACnE,gBAAgB,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,SAAS,SAAS,CAAC,CAAC;IAErE,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IAC/E,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEzC,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC,QAAQ,CAAC,cAAc,EAAE;QAC7E,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,WAAW;QACX,YAAY;KACb,CAAC,CAAC;IAEH,OAAO;QACL,SAAS;QACT,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,WAAW;QACX,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI,YAAY;QAC1C,aAAa,EAAE,QAAQ,CAAC,cAAc;QACtC,qBAAqB,EAAE,QAAQ,CAAC,sBAAsB;QACtD,oBAAoB,EAAE,QAAQ,CAAC,qBAAqB;QACpD,WAAW,EAAE,aAAa,CAAC,YAAY;QACvC,YAAY,EAAE,aAAa,CAAC,aAAa,IAAI,EAAE;QAC/C,SAAS,EAAE,oBAAoB,CAAC,aAAa,CAAC,UAAU,CAAC;KAC1D,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,WAA8B;IAE9B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE;QACtD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,eAAe;YAC3B,SAAS,EAAE,WAAW,CAAC,QAAQ;YAC/B,aAAa,EAAE,WAAW,CAAC,YAAY;SACxC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,mCAAmC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;IAEzD,OAAO;QACL,GAAG,WAAW;QACd,WAAW,EAAE,OAAO,CAAC,YAAY;QACjC,YAAY,EAAE,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,YAAY;QAC/D,SAAS,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;QACnD,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC,KAAK;KAC1C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,aAAqB,EACrB,KAKC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,EAAE;QAC1C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;SAClC,CAAC;KACH,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,0CAA0C,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,EAA4B,CAAC;AACnD,CAAC;AAED,SAAS,oBAAoB,CAAC,gBAAwB;IACpD,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AACtE,CAAC"}

package/dist/worker/auth/worker-auth-client.d.ts

@@ -0,0 +1,9 @@
+import type { WorkerCredentials } from './worker-auth.types';
+export declare function getAuthenticatedWorkerSession(input: {
+    serverUrl: string;
+    credentialsPath?: string;
+}): Promise<{
+    credentials: WorkerCredentials;
+    credentialsPath: string;
+    didBootstrap: boolean;
+}>;

package/dist/worker/auth/worker-auth-client.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAuthenticatedWorkerSession = getAuthenticatedWorkerSession;
+const credentials_store_1 = require("./credentials-store");
+const internal_auth_target_constant_1 = require("../../auth/core/constants/internal-auth-target.constant");
+const oauth_client_1 = require("./oauth-client");
+async function getAuthenticatedWorkerSession(input) {
+    const credentialsPath = input.credentialsPath ?? credentials_store_1.DEFAULT_WORKER_CREDENTIALS_PATH;
+    const metadata = await (0, oauth_client_1.discoverAuthorizationServer)(input.serverUrl);
+    let credentials = await (0, credentials_store_1.readWorkerCredentials)(credentialsPath);
+    let didBootstrap = false;
+    const requiredScopes = new Set(internal_auth_target_constant_1.INTERNAL_WORKER_AUTH_SCOPES.map((scope) => scope.id));
+    if (!credentials ||
+        credentials.serverUrl !== input.serverUrl ||
+        !hasRequiredScopes(credentials, requiredScopes)) {
+        credentials = await (0, oauth_client_1.bootstrapWorkerAuthorization)(input.serverUrl, metadata);
+        await (0, credentials_store_1.writeWorkerCredentials)(credentialsPath, credentials);
+        didBootstrap = true;
+    }
+    credentials = await (0, oauth_client_1.refreshWorkerToken)(credentials);
+    await (0, credentials_store_1.writeWorkerCredentials)(credentialsPath, credentials);
+    return {
+        credentials,
+        credentialsPath,
+        didBootstrap,
+    };
+}
+function hasRequiredScopes(credentials, requiredScopes) {
+    const grantedScopes = new Set(credentials.scope
+        .split(/\s+/)
+        .map((scope) => scope.trim())
+        .filter(Boolean));
+    return Array.from(requiredScopes).every((scope) => grantedScopes.has(scope));
+}
+//# sourceMappingURL=worker-auth-client.js.map

package/dist/worker/auth/worker-auth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-auth-client.js","sourceRoot":"","sources":["../../../src/worker/auth/worker-auth-client.ts"],"names":[],"mappings":";;AAaA,sEAmCC;AAhDD,2DAI6B;AAC7B,2GAAsG;AACtG,iDAIwB;AAGjB,KAAK,UAAU,6BAA6B,CAAC,KAGnD;IAKC,MAAM,eAAe,GACnB,KAAK,CAAC,eAAe,IAAI,mDAA+B,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,IAAA,0CAA2B,EAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,WAAW,GAAG,MAAM,IAAA,yCAAqB,EAAC,eAAe,CAAC,CAAC;IAC/D,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,2DAA2B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CACrD,CAAC;IAEF,IACE,CAAC,WAAW;QACZ,WAAW,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACzC,CAAC,iBAAiB,CAAC,WAAW,EAAE,cAAc,CAAC,EAC/C,CAAC;QACD,WAAW,GAAG,MAAM,IAAA,2CAA4B,EAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC5E,MAAM,IAAA,0CAAsB,EAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QAC3D,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,WAAW,GAAG,MAAM,IAAA,iCAAkB,EAAC,WAAW,CAAC,CAAC;IACpD,MAAM,IAAA,0CAAsB,EAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAE3D,OAAO;QACL,WAAW;QACX,eAAe;QACf,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,WAA8B,EAC9B,cAA2B;IAE3B,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,WAAW,CAAC,KAAK;SACd,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IAEF,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/worker/auth/worker-auth.types.d.ts

@@ -0,0 +1,30 @@
+export type AuthorizationServerMetadata = {
+    issuer: string;
+    authorization_endpoint: string;
+    token_endpoint: string;
+    registration_endpoint: string;
+    scopes_supported: string[];
+    response_types_supported: string[];
+    grant_types_supported: string[];
+    token_endpoint_auth_methods_supported: string[];
+    code_challenge_methods_supported: string[];
+};
+export type WorkerCredentials = {
+    serverUrl: string;
+    clientId: string;
+    redirectUri: string;
+    scope: string;
+    tokenEndpoint: string;
+    authorizationEndpoint: string;
+    registrationEndpoint: string;
+    accessToken: string;
+    refreshToken: string;
+    expiresAt: string;
+};
+export type TokenResponse = {
+    access_token: string;
+    token_type: string;
+    expires_in: number;
+    refresh_token?: string;
+    scope?: string;
+};

package/dist/worker/auth/worker-auth.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=worker-auth.types.js.map

package/dist/worker/auth/worker-auth.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-auth.types.js","sourceRoot":"","sources":["../../../src/worker/auth/worker-auth.types.ts"],"names":[],"mappings":""}

package/dist/worker/execution-orchestrator.d.ts

@@ -0,0 +1,25 @@
+import { WorkerGatewayClient } from './worker-gateway-client';
+type ExecutionOrchestratorOptions = {
+    serverUrl: string;
+    workerAccessToken: string;
+    gatewayClient: WorkerGatewayClient;
+};
+export declare class ExecutionOrchestrator {
+    private readonly options;
+    private readonly activeExecutionIds;
+    constructor(options: ExecutionOrchestratorOptions);
+    bind(): void;
+    private handleRunAssigned;
+    private handleStopRequested;
+    private executeAssignedRun;
+    private createRunner;
+    private buildPrompt;
+    private fetchTask;
+    private fetchThreadByTaskId;
+    private fetchAgentByActorId;
+    private requestExecutionToken;
+    private resolveRepoUrl;
+    private fetchJson;
+    private errorToMessage;
+}
+export {};

package/dist/worker/execution-orchestrator.js

@@ -0,0 +1,186 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionOrchestrator = void 0;
+const prepare_workspace_1 = require("./helpers/prepare-workspace");
+const session_store_1 = require("./helpers/session-store");
+const claude_agent_runner_1 = require("./runners/claude-agent-runner");
+const opencode_agent_runner_1 = require("./runners/opencode-agent-runner");
+class ExecutionOrchestrator {
+    options;
+    activeExecutionIds = new Set();
+    constructor(options) {
+        this.options = options;
+    }
+    bind() {
+        this.options.gatewayClient.onRunAssigned((event) => {
+            void this.handleRunAssigned(event);
+        });
+        this.options.gatewayClient.onStopRequested((event) => {
+            this.handleStopRequested(event);
+        });
+    }
+    async handleRunAssigned(event) {
+        if (this.activeExecutionIds.has(event.executionId)) {
+            console.warn(`[worker] received duplicate run assignment for execution ${event.executionId}`);
+            return;
+        }
+        this.activeExecutionIds.add(event.executionId);
+        try {
+            await this.options.gatewayClient.reportRunStarted(event.executionId);
+            await this.executeAssignedRun(event);
+            await this.options.gatewayClient.reportRunCompleted(event.executionId);
+        }
+        catch (error) {
+            const reason = this.errorToMessage(error);
+            console.error(`[worker] execution ${event.executionId} failed: ${reason}`, error);
+            await this.options.gatewayClient.reportRunFailed(event.executionId, reason);
+        }
+        finally {
+            this.activeExecutionIds.delete(event.executionId);
+        }
+    }
+    handleStopRequested(event) {
+        if (!this.activeExecutionIds.has(event.executionId)) {
+            console.log(`[worker] stop requested for non-running execution ${event.executionId}`);
+            return;
+        }
+        console.log(`[worker] stop requested for execution ${event.executionId}; cancellation is not yet implemented`);
+    }
+    async executeAssignedRun(event) {
+        const task = await this.fetchTask(event.taskId);
+        const agent = await this.fetchAgentByActorId(event.agentActorId);
+        if (!agent.systemPrompt) {
+            throw new Error(`Agent @${agent.slug} has no system prompt configured`);
+        }
+        const executionToken = await this.requestExecutionToken(agent.slug);
+        const repoUrl = await this.resolveRepoUrl(task.tags ?? []);
+        const workspaceDir = await (0, prepare_workspace_1.prepareWorkspace)(task.id, agent.actorId, repoUrl);
+        const thread = await this.fetchThreadByTaskId(task.id);
+        const runner = this.createRunner(agent.type);
+        console.log(`[worker] executing ${event.executionId} for task ${task.id} with @${agent.slug} in ${workspaceDir}`);
+        await runner.run({
+            taskId: task.id,
+            prompt: this.buildPrompt(task, agent, thread),
+            cwd: workspaceDir,
+            executionId: event.executionId,
+            accessToken: executionToken,
+            baseUrl: this.options.serverUrl,
+            resume: (0, session_store_1.getSession)(agent.actorId, task.id) ?? undefined,
+            agentSlug: agent.slug,
+            options: {
+                model: agent.providerId && agent.modelId
+                    ? `${agent.providerId}/${agent.modelId}`
+                    : undefined,
+            },
+        }, {
+            onEvent: async (message) => {
+                console.log(`[worker][${event.executionId}] ${message}`);
+            },
+            onSession: async (sessionId) => {
+                (0, session_store_1.setSession)(agent.actorId, task.id, sessionId);
+            },
+            onError: async (runnerError) => {
+                console.error(`[worker][${event.executionId}] runner error: ${runnerError.message}`, runnerError.rawMessage);
+            },
+        });
+    }
+    createRunner(agentType) {
+        if (agentType === 'claude') {
+            return new claude_agent_runner_1.ClaudeAgentRunner();
+        }
+        if (agentType === 'opencode') {
+            return new opencode_agent_runner_1.OpencodeAgentRunner();
+        }
+        throw new Error(`Agent type "${agentType}" is not yet supported by backend worker mode`);
+    }
+    buildPrompt(task, agent, thread) {
+        const lines = [
+            `You got triggered by new activity in task "${task.id}".`,
+            'Fetch the task and proceed according to the following instructions.',
+        ];
+        if (thread) {
+            lines.push('', 'Thread context:', `- This task belongs to thread "${thread.id}" (${thread.title}).`, `- This task is ${thread.parentTaskId === task.id ? 'the parent task' : 'an attached task'} in that thread.`, `- Read shared thread memory at the start via mcp__context__get_thread_state_memory with threadId "${thread.id}".`, `- Check sibling task status via mcp__tasks__list_tasks_by_thread with threadId "${thread.id}".`, '- Keep decisions aligned with this shared memory and thread-level goal, not only this single task.');
+        }
+        lines.push('', agent.systemPrompt);
+        return lines.join('\n');
+    }
+    async fetchTask(taskId) {
+        return this.fetchJson(`/api/v1/tasks/tasks/${taskId}`);
+    }
+    async fetchThreadByTaskId(taskId) {
+        try {
+            return await this.fetchJson(`/api/v1/threads/by-task/${taskId}`);
+        }
+        catch (error) {
+            const message = this.errorToMessage(error);
+            if (message.includes('HTTP 404')) {
+                return null;
+            }
+            throw error;
+        }
+    }
+    async fetchAgentByActorId(actorId) {
+        const response = await this.fetchJson('/api/v1/agents?limit=200');
+        const agent = response.items.find((item) => item.actorId === actorId);
+        if (!agent) {
+            throw new Error(`No agent found for actor ${actorId}`);
+        }
+        return agent;
+    }
+    async requestExecutionToken(agentSlug) {
+        const response = await this.fetchJson(`/api/v1/agents/${agentSlug}/execution-token`, {
+            method: 'POST',
+            body: JSON.stringify({
+                scopes: ['tasks:read', 'tasks:write', 'context:read', 'context:write'],
+                expirationSeconds: 3600,
+            }),
+        });
+        return response.token;
+    }
+    async resolveRepoUrl(tags) {
+        const projectTag = tags.find((tag) => tag.name.startsWith('project:'));
+        if (!projectTag) {
+            return null;
+        }
+        const slug = projectTag.name.slice('project:'.length);
+        if (!slug) {
+            return null;
+        }
+        try {
+            const project = await this.fetchJson(`/api/v1/meta/projects/by-slug/${slug}`);
+            return project.repoUrl ?? null;
+        }
+        catch (error) {
+            const message = this.errorToMessage(error);
+            if (message.includes('HTTP 404')) {
+                return null;
+            }
+            throw error;
+        }
+    }
+    async fetchJson(path, init) {
+        const response = await fetch(`${this.options.serverUrl}${path}`, {
+            ...init,
+            headers: {
+                Authorization: `Bearer ${this.options.workerAccessToken}`,
+                'Content-Type': 'application/json',
+                ...(init?.headers ?? {}),
+            },
+        });
+        if (!response.ok) {
+            throw new Error(`HTTP ${response.status} when requesting ${path}: ${response.statusText}`);
+        }
+        return (await response.json());
+    }
+    errorToMessage(error) {
+        if (error instanceof Error) {
+            return error.message;
+        }
+        if (typeof error === 'string') {
+            return error;
+        }
+        return String(error);
+    }
+}
+exports.ExecutionOrchestrator = ExecutionOrchestrator;
+//# sourceMappingURL=execution-orchestrator.js.map

package/dist/worker/execution-orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-orchestrator.js","sourceRoot":"","sources":["../../src/worker/execution-orchestrator.ts"],"names":[],"mappings":";;;AACA,mEAA+D;AAC/D,2DAAiE;AACjE,uEAAkE;AAClE,2EAAsE;AA+CtE,MAAa,qBAAqB;IAGH;IAFZ,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAExD,YAA6B,OAAqC;QAArC,YAAO,GAAP,OAAO,CAA8B;IAAG,CAAC;IAEtE,IAAI;QACF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE;YACjD,KAAK,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,EAAE;YACnD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAA2B;QACzD,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,IAAI,CACV,4DAA4D,KAAK,CAAC,WAAW,EAAE,CAChF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE/C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,CAAC,KAAK,CACX,sBAAsB,KAAK,CAAC,WAAW,YAAY,MAAM,EAAE,EAC3D,KAAK,CACN,CAAC;YACF,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9E,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAA6B;QACvD,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CACT,qDAAqD,KAAK,CAAC,WAAW,EAAE,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CACT,yCAAyC,KAAK,CAAC,WAAW,uCAAuC,CAClG,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,KAA2B;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,IAAI,kCAAkC,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,MAAM,IAAA,oCAAgB,EAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE7C,OAAO,CAAC,GAAG,CACT,sBAAsB,KAAK,CAAC,WAAW,aAAa,IAAI,CAAC,EAAE,UAAU,KAAK,CAAC,IAAI,OAAO,YAAY,EAAE,CACrG,CAAC;QAEF,MAAM,MAAM,CAAC,GAAG,CACd;YACE,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC;YAC7C,GAAG,EAAE,YAAY;YACjB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,cAAc;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YAC/B,MAAM,EAAE,IAAA,0BAAU,EAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,SAAS;YACvD,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,OAAO,EAAE;gBACP,KAAK,EACH,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO;oBAC/B,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,EAAE;oBACxC,CAAC,CAAC,SAAS;aAChB;SACF,EACD;YACE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;gBAC7B,IAAA,0BAAU,EAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;gBAC7B,OAAO,CAAC,KAAK,CACX,YAAY,KAAK,CAAC,WAAW,mBAAmB,WAAW,CAAC,OAAO,EAAE,EACrE,WAAW,CAAC,UAAU,CACvB,CAAC;YACJ,CAAC;SACF,CACF,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,SAAiB;QACpC,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO,IAAI,uCAAiB,EAAE,CAAC;QACjC,CAAC;QAED,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,IAAI,2CAAmB,EAAE,CAAC;QACnC,CAAC;QAED,MAAM,IAAI,KAAK,CACb,eAAe,SAAS,+CAA+C,CACxE,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,IAAkB,EAClB,KAAoB,EACpB,MAA6B;QAE7B,MAAM,KAAK,GAAa;YACtB,8CAA8C,IAAI,CAAC,EAAE,IAAI;YACzD,qEAAqE;SACtE,CAAC;QAEF,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,IAAI,CACR,EAAE,EACF,iBAAiB,EACjB,kCAAkC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC,KAAK,IAAI,EACjE,kBAAkB,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,kBAAkB,EAC5G,qGAAqG,MAAM,CAAC,EAAE,IAAI,EAClH,mFAAmF,MAAM,CAAC,EAAE,IAAI,EAChG,oGAAoG,CACrG,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAAc;QACpC,OAAO,IAAI,CAAC,SAAS,CAAe,uBAAuB,MAAM,EAAE,CAAC,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAAc;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,SAAS,CAAiB,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAe;QAC/C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAoB,0BAA0B,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CACnC,kBAAkB,SAAS,kBAAkB,EAC7C;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,CAAC;gBACtE,iBAAiB,EAAE,IAAI;aACxB,CAAC;SACH,CACF,CAAC;QAEF,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAe;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAClC,iCAAiC,IAAI,EAAE,CACxC,CAAC;YACF,OAAO,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QACjC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,IAAY,EAAE,IAAkB;QACzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,IAAI,EAAE,EAAE;YAC/D,GAAG,IAAI;YACP,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE;gBACzD,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;aACzB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,QAAQ,QAAQ,CAAC,MAAM,oBAAoB,IAAI,KAAK,QAAQ,CAAC,UAAU,EAAE,CAC1E,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAEO,cAAc,CAAC,KAAc;QACnC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;CACF;AA9OD,sDA8OC"}

package/dist/worker/formatters/claude-message-formatter.d.ts

@@ -0,0 +1,13 @@
+import { SDKMessage } from '@anthropic-ai/claude-agent-sdk';
+export declare class ClaudeMessageFormatter {
+    private readonly agentSlug?;
+    constructor(agentSlug?: string | undefined);
+    format(message: SDKMessage): string | null;
+    private formatAssistant;
+    private formatUser;
+    private formatResult;
+    private formatSystem;
+    private formatStreamEvent;
+    private formatToolProgress;
+    private formatAuthStatus;
+}

package/dist/worker/formatters/claude-message-formatter.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ClaudeMessageFormatter = void 0;
+class ClaudeMessageFormatter {
+    agentSlug;
+    constructor(agentSlug) {
+        this.agentSlug = agentSlug;
+    }
+    format(message) {
+        switch (message.type) {
+            case 'assistant':
+                return this.formatAssistant(message);
+            case 'user':
+                return this.formatUser(message);
+            case 'result':
+                return this.formatResult(message);
+            case 'system':
+                return this.formatSystem(message);
+            case 'stream_event':
+                return this.formatStreamEvent(message);
+            case 'tool_progress':
+                return this.formatToolProgress(message);
+            case 'auth_status':
+                return this.formatAuthStatus(message);
+            default:
+                return null;
+        }
+    }
+    formatAssistant(message) {
+        const parts = [];
+        const content = message.message?.content;
+        if (!Array.isArray(content)) {
+            return null;
+        }
+        const agentLabel = this.agentSlug ? `@${this.agentSlug}` : 'Assistant';
+        for (const chunk of content) {
+            if (chunk.type === 'tool_use') {
+                parts.push(`🔧 ${agentLabel} Tool call: ${chunk.name}`);
+            }
+            else if (chunk.type === 'text') {
+                parts.push(`💬 ${agentLabel}: ${chunk.text}`);
+            }
+        }
+        return parts.length > 0 ? parts.join('\n') : null;
+    }
+    formatUser(message) {
+        const parts = [];
+        const content = message.message?.content;
+        if (!Array.isArray(content)) {
+            return null;
+        }
+        for (const chunk of content) {
+            if (chunk.type === 'text') {
+                parts.push(`👤 User: ${chunk.text}`);
+            }
+        }
+        return parts.length > 0 ? parts.join('\n') : null;
+    }
+    formatResult(message) {
+        const agentLabel = this.agentSlug ? `@${this.agentSlug}` : 'Assistant';
+        if (message.subtype === 'success' && typeof message.result === 'string') {
+            return [`--- ${agentLabel} turn complete ---`, message.result, '---------------------------'].join('\n');
+        }
+        return `✅ ${agentLabel} result received`;
+    }
+    formatSystem(message) {
+        const agentLabel = this.agentSlug ? `@${this.agentSlug}` : 'Assistant';
+        if (message.subtype === 'init') {
+            return [
+                `🧠 ${agentLabel} Claude initialized`,
+                `- Permissions: ${message.permissionMode}`,
+                `- Tools: ${message.tools.length}`,
+                `- MCP Servers: ${message.mcp_servers.length}`,
+            ].join('\n');
+        }
+        return null;
+    }
+    formatStreamEvent(_) {
+        return null;
+    }
+    formatToolProgress(_) {
+        return null;
+    }
+    formatAuthStatus(_) {
+        const agentLabel = this.agentSlug ? `@${this.agentSlug}` : 'Assistant';
+        return `🔐 ${agentLabel} Auth status updated`;
+    }
+}
+exports.ClaudeMessageFormatter = ClaudeMessageFormatter;
+//# sourceMappingURL=claude-message-formatter.js.map