@tianshu-ai/tianshu 0.3.52 → 0.3.53

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tianshu-ai/tianshu",
-  "version": "0.3.52",
+  "version": "0.3.53",
   "description": "An open AI agent platform with a sidecar browser. Built in public.",
   "license": "Apache-2.0",
   "homepage": "https://github.com/tianshu-ai/tianshu",

package/packages/server/dist/boot/idle-runner.d.ts

@@ -0,0 +1,15 @@
+import type { GlobalOps } from "../core/global-ops.js";
+import type { PluginRegistry } from "../core/plugins/registry.js";
+export interface InstallIdleRunnerDeps {
+    globalOps: GlobalOps;
+    pluginRegistry: PluginRegistry;
+}
+/**
+ * Install the idle-runner. Idempotent in practice (bindIdleRunner is
+ * a one-shot module setter), but conceptually call once at boot.
+ *
+ * Deps are captured by closure so this module doesn't need a
+ * mutable singleton.
+ */
+export declare function installIdleRunner(deps: InstallIdleRunnerDeps): void;
+//# sourceMappingURL=idle-runner.d.ts.map

package/packages/server/dist/boot/idle-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idle-runner.d.ts","sourceRoot":"","sources":["../../src/boot/idle-runner.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,IAAI,CAyGnE"}

package/packages/server/dist/boot/idle-runner.js

@@ -0,0 +1,118 @@
+// Wire the session-inbox idle runner.
+//
+// When a worker pool finishes a task and the parent chat session is
+// idle (no active harness), the inbox module kicks a background
+// `runPrompt` turn so the agent reacts to the notification
+// immediately instead of waiting for the user to send something.
+//
+// We bind once at startup (`bindIdleRunner` is process-wide) so the
+// inbox module doesn't have to import the host registry directly. The
+// runner closure resolves the tenant from globalOps at call time \u2014
+// the session row already lives in some tenant DB; the closure is
+// tenant-agnostic.
+//
+// Two delivery paths matter inside the runner:
+//   - webchat session     \u2192 broadcastToUser to every open WS tab
+//   - channel-bound session \u2192 buildChannelStreamSink \u2192 channelHub
+//
+// Without that split a background turn on a wechat-bound session ends
+// up only on the user's webchat tabs (if any) and never crosses back
+// to the platform user. See memory/2026-06-27 for the original bug.
+import { bindIdleRunner } from "../chat/session-inbox.js";
+import { runPrompt } from "../chat/handler.js";
+import { broadcastToUser } from "../chat/active-harnesses.js";
+import { buildChannelStreamSink, channelHub } from "../channels/index.js";
+/**
+ * Install the idle-runner. Idempotent in practice (bindIdleRunner is
+ * a one-shot module setter), but conceptually call once at boot.
+ *
+ * Deps are captured by closure so this module doesn't need a
+ * mutable singleton.
+ */
+export function installIdleRunner(deps) {
+    const { globalOps, pluginRegistry } = deps;
+    bindIdleRunner(async ({ sessionId, userId, promptText }) => {
+        // Find which tenant owns this session, and pick up the channel
+        // tagging columns at the same time so we know whether to fan
+        // replies out to WS tabs (webchat) or push them through the
+        // channel adapter (wechat / telegram / ...). If no tenant
+        // claims this session, give up silently \u2014 the inbox row stays
+        // delivered=false and will be flushed on the next user prompt.
+        let owningCtx = null;
+        let channelBindingId = null;
+        let channelChatId = null;
+        for (const tenantId of globalOps.list()) {
+            const ctx = globalOps.open(tenantId);
+            const row = ctx.db
+                .prepare(`SELECT id, channel_binding_id, channel_chat_id
+             FROM sessions WHERE id = ?`)
+                .get(sessionId);
+            if (row) {
+                owningCtx = ctx;
+                channelBindingId = row.channel_binding_id;
+                channelChatId = row.channel_chat_id;
+                break;
+            }
+        }
+        if (!owningCtx) {
+            console.warn(`[idle-runner] no tenant found for session ${sessionId}; skipping`);
+            return;
+        }
+        const ctx = owningCtx;
+        const isChannelSession = channelBindingId !== null && channelChatId !== null;
+        const channelSink = isChannelSession
+            ? buildChannelStreamSink({ sessionId, userId })
+            : null;
+        let errorReason = "";
+        const send = (msg) => {
+            if (channelSink) {
+                channelSink.push(msg);
+            }
+            else {
+                broadcastToUser(userId, msg);
+            }
+        };
+        // Wedge guard: a stuck provider can't pin the inbox queue
+        // forever. No user-facing abort button for an inbox turn \u2014
+        // generous deadline only.
+        const controller = new AbortController();
+        const deadline = setTimeout(() => controller.abort(), 5 * 60 * 1000);
+        try {
+            await runPrompt({
+                ctx,
+                userId,
+                send,
+                content: promptText,
+                signal: controller.signal,
+                pluginRegistry,
+                homeDir: ctx.workspaceDir,
+            });
+        }
+        catch (err) {
+            errorReason = err instanceof Error ? err.message : String(err);
+        }
+        finally {
+            clearTimeout(deadline);
+        }
+        if (channelSink && channelBindingId && channelChatId) {
+            const sinkError = channelSink.getErrorReason();
+            if (sinkError)
+                errorReason = sinkError;
+            for (const body of channelSink.assistantQueue) {
+                try {
+                    await channelHub.send(channelBindingId, {
+                        target: channelChatId,
+                        text: body,
+                    });
+                }
+                catch (err) {
+                    console.error(`[idle-runner] adapter send failed (${channelBindingId} \u2192 ${channelChatId}): ${err instanceof Error ? err.message : String(err)}`);
+                }
+            }
+            if (errorReason.length > 0) {
+                console.warn(`[idle-runner] background turn errored on channel session ${sessionId}: ${errorReason}`);
+            }
+        }
+    });
+}
+//# sourceMappingURL=idle-runner.js.map

package/packages/server/dist/boot/idle-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idle-runner.js","sourceRoot":"","sources":["../../src/boot/idle-runner.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,oEAAoE;AACpE,gEAAgE;AAChE,2DAA2D;AAC3D,iEAAiE;AACjE,EAAE;AACF,oEAAoE;AACpE,sEAAsE;AACtE,wEAAwE;AACxE,kEAAkE;AAClE,mBAAmB;AACnB,EAAE;AACF,+CAA+C;AAC/C,sEAAsE;AACtE,4EAA4E;AAC5E,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,oEAAoE;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAU1E;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAE3C,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;QACzD,+DAA+D;QAC/D,6DAA6D;QAC7D,4DAA4D;QAC5D,0DAA0D;QAC1D,mEAAmE;QACnE,+DAA+D;QAC/D,IAAI,SAAS,GAA6C,IAAI,CAAC;QAC/D,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,aAAa,GAAkB,IAAI,CAAC;QACxC,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE;iBACf,OAAO,CAQN;wCAC8B,CAC/B;iBACA,GAAG,CAAC,SAAS,CAAC,CAAC;YAClB,IAAI,GAAG,EAAE,CAAC;gBACR,SAAS,GAAG,GAAG,CAAC;gBAChB,gBAAgB,GAAG,GAAG,CAAC,kBAAkB,CAAC;gBAC1C,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC;gBACpC,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,6CAA6C,SAAS,YAAY,CACnE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC;QACtB,MAAM,gBAAgB,GACpB,gBAAgB,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI,CAAC;QAEtD,MAAM,WAAW,GAAG,gBAAgB;YAClC,CAAC,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;YAC/C,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,GAAc,EAAE,EAAE;YAC9B,IAAI,WAAW,EAAE,CAAC;gBAChB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC;QAEF,0DAA0D;QAC1D,gEAAgE;QAChE,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CACzB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,CAAC,GAAG,EAAE,GAAG,IAAI,CACd,CAAC;QACF,IAAI,CAAC;YACH,MAAM,SAAS,CAAC;gBACd,GAAG;gBACH,MAAM;gBACN,IAAI;gBACJ,OAAO,EAAE,UAAU;gBACnB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,cAAc;gBACd,OAAO,EAAE,GAAG,CAAC,YAAY;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAED,IAAI,WAAW,IAAI,gBAAgB,IAAI,aAAa,EAAE,CAAC;YACrD,MAAM,SAAS,GAAG,WAAW,CAAC,cAAc,EAAE,CAAC;YAC/C,IAAI,SAAS;gBAAE,WAAW,GAAG,SAAS,CAAC;YACvC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE;wBACtC,MAAM,EAAE,aAAa;wBACrB,IAAI,EAAE,IAAI;qBACX,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,KAAK,CACX,sCAAsC,gBAAgB,WAAW,aAAa,MAC5E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CACV,4DAA4D,SAAS,KAAK,WAAW,EAAE,CACxF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/packages/server/dist/boot/routes-channels.d.ts

@@ -0,0 +1,15 @@
+import type { Express } from "express";
+import type { ChannelBinding } from "../channels/index.js";
+import type { ChannelBindingView } from "@tianshu-ai/plugin-sdk";
+/** Map an internal binding row to the SDK-shaped view. Same wire
+ *  shape host.channelBindings.list() emits, so plugin UIs and admin
+ *  routes don't diverge. */
+export declare function toView(row: ChannelBinding): ChannelBindingView;
+/**
+ * Mount all `/api/channel-{sessions,bindings}/*` routes on the
+ * provided Express app. Call once during boot, after the tenant
+ * middleware has been installed (these routes assume `req.ctx`
+ * exists).
+ */
+export declare function mountChannelRoutes(app: Express): void;
+//# sourceMappingURL=routes-channels.d.ts.map

package/packages/server/dist/boot/routes-channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-channels.d.ts","sourceRoot":"","sources":["../../src/boot/routes-channels.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE;;4BAE4B;AAC5B,wBAAgB,MAAM,CAAC,GAAG,EAAE,cAAc,GAAG,kBAAkB,CAe9D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAUrD"}

package/packages/server/dist/boot/routes-channels.js

@@ -0,0 +1,150 @@
+// Channel admin routes: read-only `/api/channel-sessions/*` for the
+// sidebar + UI controls, plus `PATCH /api/channel-bindings/:id/model`
+// so a user can flip the LLM behind their wechat / telegram thread
+// without re-binding.
+//
+// These all live behind the tenant middleware so `req.ctx` is
+// available; each route enforces user scoping (sessions.user_id /
+// bindings.owner_user_id) so two users in the same tenant can't read
+// each other's channel state.
+import { getBinding, updateBinding } from "../channels/index.js";
+/** Map an internal binding row to the SDK-shaped view. Same wire
+ *  shape host.channelBindings.list() emits, so plugin UIs and admin
+ *  routes don't diverge. */
+export function toView(row) {
+    return {
+        id: row.id,
+        tenantId: row.tenantId,
+        ownerUserId: row.ownerUserId,
+        channelId: row.channelId,
+        pluginId: row.pluginId,
+        displayName: row.displayName,
+        enabled: row.enabled,
+        status: row.status,
+        statusDetail: row.statusDetail,
+        config: row.config,
+        createdAt: row.createdAt,
+        updatedAt: row.updatedAt,
+    };
+}
+/**
+ * Mount all `/api/channel-{sessions,bindings}/*` routes on the
+ * provided Express app. Call once during boot, after the tenant
+ * middleware has been installed (these routes assume `req.ctx`
+ * exists).
+ */
+export function mountChannelRoutes(app) {
+    app.get("/api/channel-sessions", listChannelSessions);
+    app.get("/api/channel-sessions/:sessionId/binding", getChannelSessionBinding);
+    app.patch("/api/channel-bindings/:bindingId/model", patchChannelBindingModel);
+}
+function listChannelSessions(req, res) {
+    if (!req.ctx) {
+        res.status(500).json({ error: "no_ctx" });
+        return;
+    }
+    // Scope to the calling user: channel sessions are personal (one
+    // user's wechat scan shouldn't surface to other users on the same
+    // tenant). user_id on the session row already tracks this because
+    // ensureChannelSession stamps it from the binding's owner_user_id.
+    const rows = req.ctx.tenant.db
+        .prepare(`SELECT id, channel_id, channel_chat_id, channel_binding_id,
+              title, created_at
+         FROM sessions
+        WHERE channel_id IS NOT NULL
+          AND kind = 'user'
+          AND user_id = ?
+        ORDER BY created_at DESC`)
+        .all(req.ctx.userId);
+    res.json({
+        sessions: rows.map((r) => ({
+            id: r.id,
+            channelId: r.channel_id,
+            channelChatId: r.channel_chat_id,
+            channelBindingId: r.channel_binding_id,
+            title: r.title,
+            createdAt: r.created_at,
+        })),
+    });
+}
+/**
+ * Return the binding row a channel session belongs to. Channel UIs
+ * use this to populate per-session controls (model selector, etc.)
+ * keyed off the session the user is viewing. Filtered by user_id so
+ * users can't read each other's bindings.
+ */
+function getChannelSessionBinding(req, res) {
+    if (!req.ctx) {
+        res.status(500).json({ error: "no_ctx" });
+        return;
+    }
+    const rawSid = req.params.sessionId;
+    const sessionId = Array.isArray(rawSid) ? rawSid[0] : rawSid;
+    if (!sessionId) {
+        res.status(400).json({ error: "missing session id" });
+        return;
+    }
+    const row = req.ctx.tenant.db
+        .prepare(`SELECT channel_binding_id AS binding_id
+         FROM sessions
+        WHERE id = ? AND user_id = ?
+        LIMIT 1`)
+        .get(sessionId, req.ctx.userId);
+    if (!row?.binding_id) {
+        res.status(404).json({ error: "no binding for session" });
+        return;
+    }
+    const binding = getBinding(req.ctx.tenant.db, row.binding_id);
+    if (!binding ||
+        binding.tenantId !== req.ctx.tenant.tenantId ||
+        binding.ownerUserId !== req.ctx.userId) {
+        res.status(404).json({ error: "binding not found" });
+        return;
+    }
+    res.json({
+        binding: {
+            id: binding.id,
+            channelId: binding.channelId,
+            modelId: typeof binding.config.modelId === "string" &&
+                binding.config.modelId.trim().length > 0
+                ? binding.config.modelId.trim()
+                : null,
+        },
+    });
+}
+/**
+ * Update a binding's model. PATCH so the body is the partial we
+ * want to merge. Only `modelId` is patchable through this route
+ * today; future channel-config edits can land on the same surface.
+ */
+function patchChannelBindingModel(req, res) {
+    if (!req.ctx) {
+        res.status(500).json({ error: "no_ctx" });
+        return;
+    }
+    const rawBid = req.params.bindingId;
+    const bindingId = Array.isArray(rawBid) ? rawBid[0] : rawBid;
+    if (!bindingId) {
+        res.status(400).json({ error: "missing binding id" });
+        return;
+    }
+    const body = (req.body ?? {});
+    const newModelId = typeof body.modelId === "string" && body.modelId.trim().length > 0
+        ? body.modelId.trim()
+        : null;
+    const binding = getBinding(req.ctx.tenant.db, bindingId);
+    if (!binding ||
+        binding.tenantId !== req.ctx.tenant.tenantId ||
+        binding.ownerUserId !== req.ctx.userId) {
+        res.status(404).json({ error: "binding not found" });
+        return;
+    }
+    const nextConfig = { ...binding.config };
+    if (newModelId)
+        nextConfig.modelId = newModelId;
+    else
+        delete nextConfig.modelId;
+    updateBinding(req.ctx.tenant.db, bindingId, { config: nextConfig });
+    res.json({ ok: true, modelId: newModelId });
+}
+//# sourceMappingURL=routes-channels.js.map

package/packages/server/dist/boot/routes-channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-channels.js","sourceRoot":"","sources":["../../src/boot/routes-channels.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,sEAAsE;AACtE,mEAAmE;AACnE,sBAAsB;AACtB,EAAE;AACF,8DAA8D;AAC9D,kEAAkE;AAClE,qEAAqE;AACrE,8BAA8B;AAG9B,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAIjE;;4BAE4B;AAC5B,MAAM,UAAU,MAAM,CAAC,GAAmB;IACxC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;IACtD,GAAG,CAAC,GAAG,CACL,0CAA0C,EAC1C,wBAAwB,CACzB,CAAC;IACF,GAAG,CAAC,KAAK,CACP,wCAAwC,EACxC,wBAAwB,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAY,EAAE,GAAa;IACtD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,gEAAgE;IAChE,kEAAkE;IAClE,kEAAkE;IAClE,mEAAmE;IACnE,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SAC3B,OAAO,CAWN;;;;;;iCAM2B,CAC5B;SACA,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC;QACP,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,aAAa,EAAE,CAAC,CAAC,eAAe;YAChC,gBAAgB,EAAE,CAAC,CAAC,kBAAkB;YACtC,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,UAAU;SACxB,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,GAAY,EAAE,GAAa;IAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;SAC1B,OAAO,CACN;;;gBAGU,CACX;SACA,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC;QACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9D,IACE,CAAC,OAAO;QACR,OAAO,CAAC,QAAQ,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;QAC5C,OAAO,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EACtC,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CAAC;QACP,OAAO,EAAE;YACP,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EACL,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ;gBAC1C,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;gBACtC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;gBAC/B,CAAC,CAAC,IAAI;SACX;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,wBAAwB,CAAC,GAAY,EAAE,GAAa;IAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAgC,CAAC;IAC7D,MAAM,UAAU,GACd,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAChE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QACrB,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IACzD,IACE,CAAC,OAAO;QACR,OAAO,CAAC,QAAQ,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ;QAC5C,OAAO,CAAC,WAAW,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,EACtC,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACrD,OAAO;IACT,CAAC;IACD,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACzC,IAAI,UAAU;QAAE,UAAU,CAAC,OAAO,GAAG,UAAU,CAAC;;QAC3C,OAAO,UAAU,CAAC,OAAO,CAAC;IAC/B,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/packages/server/dist/boot/routes-core.d.ts

@@ -0,0 +1,10 @@
+import type { Express } from "express";
+import type { PluginRegistry } from "../core/plugins/registry.js";
+export interface MountCoreRoutesDeps {
+    /** Registry used by /api/tools and /api/skills to enumerate the
+     *  current tenant's catalog. Closures resolve it at request time
+     *  so plugin enable/disable cycles take effect immediately. */
+    pluginRegistry: PluginRegistry;
+}
+export declare function mountCoreRoutes(app: Express, deps: MountCoreRoutesDeps): void;
+//# sourceMappingURL=routes-core.d.ts.map

package/packages/server/dist/boot/routes-core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-core.d.ts","sourceRoot":"","sources":["../../src/boot/routes-core.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAG1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,MAAM,WAAW,mBAAmB;IAClC;;mEAE+D;IAC/D,cAAc,EAAE,cAAc,CAAC;CAChC;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,mBAAmB,GACxB,IAAI,CA0GN"}

package/packages/server/dist/boot/routes-core.js

@@ -0,0 +1,106 @@
+// Core read-only API: `/api/me`, `/api/models`, `/api/tools`,
+// `/api/skills`. These power the chat shell's identity badge,
+// model picker, and worker-agents allow-list pickers.
+//
+// All four assume tenant middleware has run (req.ctx is set); each
+// scopes to the calling user when appropriate. Side-effect-free \u2014
+// no DB writes, no plugin state mutation.
+import { DEV_TENANT_ID, DEV_USER_ID } from "../core/dev-mode.js";
+import { listModels, getDefaultModel } from "../core/llm.js";
+export function mountCoreRoutes(app, deps) {
+    const { pluginRegistry } = deps;
+    app.get("/api/me", (req, res) => {
+        if (!req.ctx) {
+            res.status(500).json({ error: "no_ctx" });
+            return;
+        }
+        const { tenant, userId } = req.ctx;
+        const def = getDefaultModel(tenant.config);
+        res.json({
+            tenantId: tenant.tenantId,
+            userId,
+            config: { branding: tenant.config.branding ?? null },
+            defaultModel: def
+                ? { id: def.id, name: def.name, provider: def.providerId }
+                : null,
+            devTenant: tenant.tenantId === DEV_TENANT_ID && userId === DEV_USER_ID,
+        });
+    });
+    app.get("/api/models", (req, res) => {
+        if (!req.ctx) {
+            res.status(500).json({ error: "no_ctx" });
+            return;
+        }
+        const list = listModels(req.ctx.tenant.config).map((m) => ({
+            id: m.id,
+            name: m.name,
+            provider: m.providerId,
+            group: m.group ?? null,
+            contextWindow: m.contextWindow,
+            reasoning: m.reasoning,
+        }));
+        res.json({
+            models: list,
+            defaultModel: req.ctx.tenant.config.defaultModel ?? null,
+        });
+    });
+    /**
+     * Tool catalog for the current tenant. Used by the worker-agents
+     * settings page to render an allow-list picker instead of the
+     * old comma-separated freetext field.
+     *
+     * Returns ALL tools the host registry knows about (host built-ins
+     * + every active plugin's contributions). Per-agent allow-list
+     * filtering happens at the worker; this endpoint is just the
+     * universe to pick from.
+     */
+    app.get("/api/tools", (req, res) => {
+        if (!req.ctx) {
+            res.status(500).json({ error: "no_ctx" });
+            return;
+        }
+        const entries = pluginRegistry.toolsForTenant(req.ctx.tenant.tenantId);
+        // De-dupe by tool name; if two plugins shipped the same name we
+        // still only show it once. Stable sort by name for the UI.
+        const byName = new Map();
+        for (const { pluginId, tool } of entries) {
+            if (byName.has(tool.schema.name))
+                continue;
+            byName.set(tool.schema.name, {
+                name: tool.schema.name,
+                description: tool.schema.description ?? "",
+                pluginId,
+            });
+        }
+        const tools = [...byName.values()].sort((a, b) => a.name.localeCompare(b.name));
+        res.json({ tools });
+    });
+    /**
+     * Skill catalog for the current tenant. Same role as /api/tools \u2014
+     * the universe of skills available (host-shipped + plugin-shipped)
+     * for the worker-agents allow-list picker.
+     */
+    app.get("/api/skills", (req, res) => {
+        if (!req.ctx) {
+            res.status(500).json({ error: "no_ctx" });
+            return;
+        }
+        const skills = pluginRegistry.skillsForTenant(req.ctx.tenant.tenantId);
+        // Same shape as /api/tools \u2014 just the bits the picker UI needs.
+        // Description is the SKILL.md frontmatter so the picker can render
+        // a tooltip; the body markdown stays server-side.
+        const out = skills
+            .map((s) => ({
+            name: s.name,
+            description: s.description,
+            pluginId: s.source.pluginId,
+            // Surface frontmatter `scope:` so the worker-agents page can
+            // hide \"scope: main\" skills from a worker's effective list.
+            // Undefined = visible to both.
+            scope: s.scope,
+        }))
+            .sort((a, b) => a.name.localeCompare(b.name));
+        res.json({ skills: out });
+    });
+}
+//# sourceMappingURL=routes-core.js.map

package/packages/server/dist/boot/routes-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes-core.js","sourceRoot":"","sources":["../../src/boot/routes-core.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,8DAA8D;AAC9D,sDAAsD;AACtD,EAAE;AACF,mEAAmE;AACnE,uEAAuE;AACvE,0CAA0C;AAG1C,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAU7D,MAAM,UAAU,eAAe,CAC7B,GAAY,EACZ,IAAyB;IAEzB,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IAEhC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACjD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC;QACnC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM;YACN,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,EAAE;YACpD,YAAY,EAAE,GAAG;gBACf,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,EAAE;gBAC1D,CAAC,CAAC,IAAI;YACR,SAAS,EACP,MAAM,CAAC,QAAQ,KAAK,aAAa,IAAI,MAAM,KAAK,WAAW;SAC9D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,UAAU;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI;SACzD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;;;OASG;IACH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACpD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,gEAAgE;QAChE,2DAA2D;QAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;QACJ,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;YACzC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE;gBAC1C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC/C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7B,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,eAAe,CAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CACxB,CAAC;QACF,qEAAqE;QACrE,mEAAmE;QACnE,kDAAkD;QAClD,MAAM,GAAG,GAAG,MAAM;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;YAC3B,6DAA6D;YAC7D,8DAA8D;YAC9D,+BAA+B;YAC/B,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/packages/server/dist/boot/static-spa.d.ts

@@ -0,0 +1,12 @@
+import type { Express } from "express";
+/**
+ * Mount the static web dist + SPA fallback when configured. Returns
+ * true if hosting was activated, false in dev mode / on failure (so
+ * the caller can log appropriately).
+ */
+export declare function mountStaticSpa(app: Express): Promise<boolean>;
+/** Whether this process is the one hosting the SPA. Cheap probe,
+ *  same check `mountStaticSpa` uses internally; callers that need
+ *  to publish the URL out-of-band consult this. */
+export declare function isSpaHosted(): boolean;
+//# sourceMappingURL=static-spa.d.ts.map

package/packages/server/dist/boot/static-spa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-spa.d.ts","sourceRoot":"","sources":["../../src/boot/static-spa.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGvC;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CA6CnE;AAED;;mDAEmD;AACnD,wBAAgB,WAAW,IAAI,OAAO,CAIrC"}

package/packages/server/dist/boot/static-spa.js

@@ -0,0 +1,86 @@
+// Optional in-process static SPA hosting.
+//
+// Two deployment modes:
+//
+//   Dev (`npm run dev` from a checkout): vite hosts the web on its
+//   own port (5183 by default). TIANSHU_WEB_DIST is unset, this
+//   module is a no-op.
+//
+//   Production / global install: the wizard's launchd plist sets
+//   TIANSHU_WEB_DIST to the bundled web dist directory and the
+//   server hosts the static files itself \u2014 the user only needs
+//   one port (3110) instead of two processes.
+//
+// Mount AFTER every `/api/*` and `/ws` handler so the SPA fallback
+// catch-all only fires for non-API requests. The fallback (any
+// unknown path \u2192 index.html) is what makes
+// `/tenants/foo/users/bar/` work without a real route on the
+// filesystem.
+//
+// Why we read index.html into a buffer rather than using
+// `res.sendFile()`: under Express 5 + Node 22+'s send module,
+// sendFile() with an absolute path consistently 404'd on our setup
+// even though `existsSync(file)` returned true. We don't fully
+// understand the resolution path send takes; bypassing it with a
+// direct buffer write is simple and works the same on every Node
+// version we test.
+import express from "express";
+/**
+ * Mount the static web dist + SPA fallback when configured. Returns
+ * true if hosting was activated, false in dev mode / on failure (so
+ * the caller can log appropriately).
+ */
+export async function mountStaticSpa(app) {
+    const webDistRaw = process.env.TIANSHU_WEB_DIST;
+    if (!webDistRaw || webDistRaw.length === 0)
+        return false;
+    try {
+        const path = await import("node:path");
+        const fs = await import("node:fs");
+        const webDist = path.resolve(webDistRaw);
+        if (!fs.existsSync(path.join(webDist, "index.html"))) {
+            // eslint-disable-next-line no-console
+            console.warn(`[tianshu] TIANSHU_WEB_DIST=${webDist} but no index.html there; ` +
+                "skipping static UI mount.");
+            return false;
+        }
+        // Two-layer handler:
+        //   1. express.static handles `/index.html`, `/assets/*`, etc.
+        //      fallthrough: true so requests it doesn't recognise
+        //      cascade to the next middleware.
+        //   2. SPA fallback: any GET request that wasn't /api or /ws
+        //      and wasn't a static asset \u2192 serve the pre-read
+        //      index.html bytes. The React router on the client decides
+        //      what to render.
+        app.use(express.static(webDist, { index: false, fallthrough: true }));
+        const indexHtml = fs.readFileSync(path.join(webDist, "index.html"));
+        app.use((req, res, next) => {
+            if (req.path.startsWith("/api/"))
+                return next();
+            if (req.path === "/api")
+                return next();
+            if (req.path.startsWith("/ws"))
+                return next();
+            if (req.method !== "GET" && req.method !== "HEAD")
+                return next();
+            // Anything else \u2014 /, /tenants/x/users/y/, /admin/foo \u2014 gets
+            // index.html. The SPA's router handles it.
+            res.type("html").send(indexHtml);
+        });
+        // eslint-disable-next-line no-console
+        console.log(`[tianshu] serving web UI from ${webDist}`);
+        return true;
+    }
+    catch (err) {
+        // eslint-disable-next-line no-console
+        console.warn(`[tianshu] failed to mount static web dist: ${err instanceof Error ? err.message : String(err)}`);
+        return false;
+    }
+}
+/** Whether this process is the one hosting the SPA. Cheap probe,
+ *  same check `mountStaticSpa` uses internally; callers that need
+ *  to publish the URL out-of-band consult this. */
+export function isSpaHosted() {
+    return Boolean(process.env.TIANSHU_WEB_DIST && process.env.TIANSHU_WEB_DIST.length > 0);
+}
+//# sourceMappingURL=static-spa.js.map

package/packages/server/dist/boot/static-spa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"static-spa.js","sourceRoot":"","sources":["../../src/boot/static-spa.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,wBAAwB;AACxB,EAAE;AACF,mEAAmE;AACnE,gEAAgE;AAChE,uBAAuB;AACvB,EAAE;AACF,iEAAiE;AACjE,+DAA+D;AAC/D,oEAAoE;AACpE,8CAA8C;AAC9C,EAAE;AACF,mEAAmE;AACnE,+DAA+D;AAC/D,gDAAgD;AAChD,6DAA6D;AAC7D,cAAc;AACd,EAAE;AACF,yDAAyD;AACzD,8DAA8D;AAC9D,mEAAmE;AACnE,+DAA+D;AAC/D,iEAAiE;AACjE,iEAAiE;AACjE,mBAAmB;AAGnB,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAY;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAChD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YACrD,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,8BAA8B,OAAO,4BAA4B;gBAC/D,2BAA2B,CAC9B,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,qBAAqB;QACrB,+DAA+D;QAC/D,0DAA0D;QAC1D,uCAAuC;QACvC,6DAA6D;QAC7D,2DAA2D;QAC3D,gEAAgE;QAChE,uBAAuB;QACvB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YACzB,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC9C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC;YACjE,sEAAsE;YACtE,2CAA2C;YAC3C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,8CAA8C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACjG,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;mDAEmD;AACnD,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CACZ,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CACxE,CAAC;AACJ,CAAC"}

package/packages/server/dist/boot/ws-upgrade.d.ts

@@ -0,0 +1,16 @@
+import type { Server as HttpServer } from "node:http";
+import { WebSocketServer } from "ws";
+import type { GlobalOps } from "../core/global-ops.js";
+import type { PluginRegistry } from "../core/plugins/registry.js";
+export interface InstallChatWebSocketDeps {
+    server: HttpServer;
+    globalOps: GlobalOps;
+    pluginRegistry: PluginRegistry;
+}
+/**
+ * Install the `/ws` WebSocketServer on the provided HTTP server.
+ * Returns the WebSocketServer for the caller to keep alive / close
+ * on shutdown.
+ */
+export declare function installChatWebSocket(deps: InstallChatWebSocketDeps): WebSocketServer;
+//# sourceMappingURL=ws-upgrade.d.ts.map

package/packages/server/dist/boot/ws-upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ws-upgrade.d.ts","sourceRoot":"","sources":["../../src/boot/ws-upgrade.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAOrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAGlE,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,wBAAwB,GAC7B,eAAe,CAyGjB"}