@thynker-labs/server 0.0.1

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+import { Router, Express, Request, Response, NextFunction } from 'express';
+export { Router } from 'express';
+import { Kernel, JobQueue, Stores } from '@thynker-labs/core';
+import { WebTransport } from '@thynker-labs/transport-web';
+
+interface ThynkerServerConfig {
+    port?: number;
+    /** Env var for shared webhook secret (default WEBHOOK_SECRET). */
+    webhookSecretEnv?: string;
+    /** Allowed CORS origins (default * for dev). */
+    corsOrigins?: string | string[];
+}
+interface CreateThynkerServerOptions {
+    kernel: Kernel;
+    webTransport: WebTransport;
+    config?: ThynkerServerConfig;
+    queue?: JobQueue;
+    stores?: Stores;
+    /** Extra REST routes mounted at /api (after built-in routes). */
+    apiRouter?: Router;
+    /** Webhook routes mounted at /webhooks (after secret middleware). */
+    webhookRouter?: Router;
+}
+declare function verifyWebhookSecret(secretEnv?: string): (req: Request, res: Response, next: NextFunction) => void;
+declare function createThynkerServer(options: CreateThynkerServerOptions): Express;
+declare function startThynkerServer(options: CreateThynkerServerOptions): Promise<{
+    app: Express;
+    port: number;
+    close: () => Promise<void>;
+}>;
+
+export { type CreateThynkerServerOptions, type ThynkerServerConfig, createThynkerServer, startThynkerServer, verifyWebhookSecret };

package/dist/index.js

@@ -0,0 +1,115 @@
+// src/index.ts
+import { randomUUID } from "crypto";
+import express from "express";
+import cors from "cors";
+function verifyWebhookSecret(secretEnv = "WEBHOOK_SECRET") {
+  return (req, res, next) => {
+    const expected = process.env[secretEnv];
+    if (!expected) {
+      res.status(503).json({ error: `${secretEnv} not configured` });
+      return;
+    }
+    const provided = req.header("x-webhook-secret") ?? req.header("x-thynker-webhook-secret") ?? (typeof req.query.secret === "string" ? req.query.secret : void 0);
+    if (provided !== expected) {
+      res.status(401).json({ error: "Invalid webhook secret" });
+      return;
+    }
+    next();
+  };
+}
+function createThynkerServer(options) {
+  const app = express();
+  const secretEnv = options.config?.webhookSecretEnv ?? "WEBHOOK_SECRET";
+  const corsOrigins = options.config?.corsOrigins ?? "*";
+  app.use(cors({ origin: corsOrigins, credentials: true }));
+  app.use(express.json({ limit: "2mb" }));
+  app.get("/api/health", (_req, res) => {
+    res.json({ ok: true, service: "thynker-api" });
+  });
+  app.post("/api/chat", async (req, res) => {
+    try {
+      const sessionId = String(req.body.sessionId ?? req.body.session ?? randomUUID());
+      const message = String(req.body.message ?? "");
+      const asyncMode = Boolean(req.body.async);
+      if (!message.trim()) {
+        res.status(400).json({ error: "message is required" });
+        return;
+      }
+      if (asyncMode) {
+        if (!options.queue) {
+          res.status(503).json({ error: "Async chat requires a configured job queue (BullMQ)" });
+          return;
+        }
+        const jobId = randomUUID();
+        await options.queue.enqueue({
+          envelope: {
+            identity: {
+              id: sessionId,
+              plane: "user",
+              roles: ["user"],
+              scopes: ["*"]
+            },
+            channel: "web",
+            replyTo: sessionId,
+            parts: [{ kind: "text", text: message }]
+          },
+          meta: { jobId, asyncChat: true, sessionId }
+        });
+        res.status(202).json({ jobId, status: "queued", sessionId });
+        return;
+      }
+      const reply = await options.webTransport.chat({ sessionId, message });
+      res.json({ reply, sessionId });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      res.status(500).json({ error: message });
+    }
+  });
+  app.get("/api/jobs/:jobId", async (req, res) => {
+    if (!options.stores) {
+      res.status(503).json({ error: "Job status requires stores" });
+      return;
+    }
+    const key = `job:${req.params.jobId}`;
+    const record = await options.stores.cache.get(key);
+    if (!record) {
+      res.status(404).json({ status: "pending" });
+      return;
+    }
+    res.json(record);
+  });
+  if (options.apiRouter) {
+    app.use("/api", options.apiRouter);
+  }
+  app.use("/webhooks", verifyWebhookSecret(secretEnv));
+  if (options.webhookRouter) {
+    app.use("/webhooks", options.webhookRouter);
+  } else {
+    app.post("/webhooks/ping", (_req, res) => {
+      res.json({ ok: true, message: "webhook secret verified" });
+    });
+  }
+  return app;
+}
+async function startThynkerServer(options) {
+  const app = createThynkerServer(options);
+  const port = options.config?.port ?? Number(process.env.API_PORT ?? 3001);
+  await new Promise((resolve) => {
+    app.listen(port, () => resolve());
+  });
+  console.log(`Thynker API listening on http://localhost:${port}`);
+  console.log(`  POST /api/chat \u2014 web chat (inline or async)`);
+  console.log(`  GET  /api/jobs/:jobId \u2014 poll async results`);
+  console.log(`  POST /webhooks/* \u2014 webhook routes (X-Webhook-Secret)`);
+  return {
+    app,
+    port,
+    close: async () => {
+    }
+  };
+}
+export {
+  createThynkerServer,
+  startThynkerServer,
+  verifyWebhookSecret
+};

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@thynker-labs/server",
+  "version": "0.0.1",
+  "description": "Express API server with REST routes, webhooks, and web chat for Thynker runtime",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "cors": "2.8.5",
+    "express": "5.1.0",
+    "@thynker-labs/core": "0.0.1",
+    "@thynker-labs/transport-web": "0.0.1"
+  },
+  "devDependencies": {
+    "@types/cors": "2.8.19",
+    "@types/express": "5.0.3",
+    "supertest": "7.1.1",
+    "@types/supertest": "6.0.3"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}