@tleblancureta/proto 0.1.2 → 0.3.0

package/dist/core-gateway/registry.js

@@ -0,0 +1,83 @@
+/**
+ * Loads skill + agent definitions from the filesystem.
+ * Skills live in skills/<name>/SKILL.md, agents in agents/<name>.md.
+ * Parsed once at import time and cached in module scope.
+ */
+import { readFileSync, readdirSync, statSync, existsSync } from 'node:fs';
+import { join, basename } from 'node:path';
+import yaml from 'yaml';
+import { config, resolveAppPath } from './config.js';
+// ── Skill loader ──
+function parseSkillFrontmatter(filePath) {
+    try {
+        const raw = readFileSync(filePath, 'utf-8');
+        if (!raw.startsWith('---'))
+            return null;
+        const parts = raw.split('---');
+        if (parts.length < 3)
+            return null;
+        const meta = yaml.parse(parts[1]) || {};
+        const name = meta.name;
+        if (!name)
+            return null;
+        return {
+            name,
+            description: meta.description ?? null,
+            mcp_tools: meta['mcp-tools'] ?? [],
+            depends: Array.isArray(meta.depends) ? meta.depends : [],
+            filePath,
+        };
+    }
+    catch (err) {
+        console.warn(`[registry] Failed to parse ${filePath}:`, err);
+        return null;
+    }
+}
+function discoverSkills() {
+    const dir = resolveAppPath(config.skills_dir);
+    if (!existsSync(dir))
+        return [];
+    const skills = [];
+    for (const entry of readdirSync(dir)) {
+        const entryPath = join(dir, entry);
+        if (!statSync(entryPath).isDirectory())
+            continue;
+        const skillFile = join(entryPath, 'SKILL.md');
+        if (!existsSync(skillFile))
+            continue;
+        const skill = parseSkillFrontmatter(skillFile);
+        if (skill)
+            skills.push(skill);
+    }
+    return skills;
+}
+// ── Agent loader ──
+function discoverAgents() {
+    const dir = resolveAppPath(config.agents_dir);
+    if (!existsSync(dir))
+        return [];
+    const agents = [];
+    for (const entry of readdirSync(dir)) {
+        if (!entry.endsWith('.md'))
+            continue;
+        agents.push({
+            name: basename(entry, '.md'),
+            filePath: join(dir, entry),
+        });
+    }
+    return agents;
+}
+// ── Cached at module level (read once at startup) ──
+let _skills = null;
+let _agents = null;
+export function loadSkills() {
+    if (!_skills)
+        _skills = discoverSkills();
+    return _skills;
+}
+export function loadAgents() {
+    if (!_agents)
+        _agents = discoverAgents();
+    return _agents;
+}
+//# sourceMappingURL=registry.js.map

package/dist/core-gateway/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../core-gateway/registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AAC1C,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAiBpD,qBAAqB;AAErB,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC3C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACvC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAA;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAA;QACtB,OAAO;YACL,IAAI;YACJ,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;YACrC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACxD,QAAQ;SACT,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,8BAA8B,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAA;QAC5D,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAY,EAAE,CAAA;IAC1B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAAE,SAAQ;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAA;QAC7C,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,SAAQ;QACpC,MAAM,KAAK,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAA;QAC9C,IAAI,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,qBAAqB;AAErB,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,MAAM,GAAY,EAAE,CAAA;IAC1B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAQ;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YAC5B,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;SAC3B,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,sDAAsD;AAEtD,IAAI,OAAO,GAAmB,IAAI,CAAA;AAClC,IAAI,OAAO,GAAmB,IAAI,CAAA;AAElC,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,cAAc,EAAE,CAAA;IACxC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,cAAc,EAAE,CAAA;IACxC,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/core-gateway/routes/admin.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+export declare function registerAdminRoutes(app: Hono): void;
+//# sourceMappingURL=admin.d.ts.map

package/dist/core-gateway/routes/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../core-gateway/routes/admin.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAIhC,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,QAe5C"}

package/dist/core-gateway/routes/admin.js

@@ -0,0 +1,91 @@
+/**
+ * Admin metadata endpoint — exposes registered tools, entities, workflows,
+ * and skills for the Proto admin panel.
+ *
+ * Reads the app directory (PROTO_APP_ROOT) to extract metadata without
+ * executing tool handlers.
+ */
+import { readdirSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { resolveAppPath } from '../config.js';
+import { loadSkills } from '../registry.js';
+export function registerAdminRoutes(app) {
+    app.get('/admin/meta', async (c) => {
+        const [tools, entities, workflows] = await Promise.all([
+            discoverToolMeta(),
+            discoverEntityMeta(),
+            discoverWorkflowMeta(),
+        ]);
+        const skills = loadSkills().map(s => ({
+            name: s.name,
+            description: s.description,
+            mcp_tools: s.mcp_tools,
+        }));
+        return c.json({ tools, entities, workflows, skills });
+    });
+}
+async function discoverToolMeta() {
+    const dir = resolveAppPath('app/tools');
+    if (!existsSync(dir))
+        return [];
+    const files = readdirSync(dir).filter(f => (f.endsWith('.ts') || f.endsWith('.js')) && f !== 'index.ts' && f !== 'index.js');
+    const tools = [];
+    for (const file of files) {
+        try {
+            const mod = await import(pathToFileURL(join(dir, file)).href);
+            const defs = mod.default;
+            if (!Array.isArray(defs))
+                continue;
+            for (const t of defs) {
+                if (t && typeof t.name === 'string') {
+                    tools.push({ name: t.name, description: t.description || '' });
+                }
+            }
+        }
+        catch {
+            // Skip files that fail to import
+        }
+    }
+    return tools;
+}
+async function discoverEntityMeta() {
+    const dir = resolveAppPath('app/entities');
+    if (!existsSync(dir))
+        return [];
+    const files = readdirSync(dir).filter(f => (f.endsWith('.ts') || f.endsWith('.js')) && f !== 'index.ts' && f !== 'index.js');
+    const entities = [];
+    for (const file of files) {
+        try {
+            const mod = await import(pathToFileURL(join(dir, file)).href);
+            const def = mod.default;
+            if (def && typeof def.name === 'string') {
+                entities.push({ name: def.name, table: def.table || '' });
+            }
+        }
+        catch { }
+    }
+    return entities;
+}
+async function discoverWorkflowMeta() {
+    const dir = resolveAppPath('app/workflows');
+    if (!existsSync(dir))
+        return [];
+    const files = readdirSync(dir).filter(f => (f.endsWith('.ts') || f.endsWith('.js')) && !f.startsWith('_'));
+    const workflows = [];
+    for (const file of files) {
+        try {
+            const mod = await import(pathToFileURL(join(dir, file)).href);
+            const def = mod.default;
+            if (def && typeof def.name === 'string') {
+                const phases = Array.isArray(def.phases)
+                    ? def.phases.map((p) => typeof p === 'string' ? p : p.name || '').filter(Boolean)
+                    : [];
+                workflows.push({ name: def.name, entityTable: def.entityTable || '', phases });
+            }
+        }
+        catch { }
+    }
+    return workflows;
+}
+//# sourceMappingURL=admin.js.map

package/dist/core-gateway/routes/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../core-gateway/routes/admin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,WAAW,EAAgB,UAAU,EAAE,MAAM,SAAS,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C,MAAM,UAAU,mBAAmB,CAAC,GAAS;IAC3C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,gBAAgB,EAAE;YAClB,kBAAkB,EAAE;YACpB,oBAAoB,EAAE;SACvB,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC,CAAA;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,GAAG,GAAG,cAAc,CAAC,WAAW,CAAC,CAAA;IACvC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,UAAU,CACtF,CAAA;IAED,MAAM,KAAK,GAA4C,EAAE,CAAA;IAEzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAA;YACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAClC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACpC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAA;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iCAAiC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,KAAK,UAAU,kBAAkB;IAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,cAAc,CAAC,CAAA;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,UAAU,CACtF,CAAA;IAED,MAAM,QAAQ,GAAsC,EAAE,CAAA;IAEtD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAA;YACvB,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,GAAG,GAAG,cAAc,CAAC,eAAe,CAAC,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CACpE,CAAA;IAED,MAAM,SAAS,GAA8D,EAAE,CAAA;IAE/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAA;YACvB,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;oBACtC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACtF,CAAC,CAAC,EAAE,CAAA;gBACN,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;YAChF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/core-gateway/routes/chat.d.ts

@@ -0,0 +1,9 @@
+import type { Hono } from 'hono';
+type UpgradeWebSocket = (handler: (c: any) => any) => any;
+/**
+ * Chat routes: WebSocket streaming (primary), REST /chat + /chat/stream
+ * (legacy), and /reset for Claude CLI session invalidation.
+ */
+export declare function registerChatRoutes(app: Hono, upgradeWebSocket: UpgradeWebSocket): void;
+export {};
+//# sourceMappingURL=chat.d.ts.map

package/dist/core-gateway/routes/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../core-gateway/routes/chat.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAQhC,KAAK,gBAAgB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,KAAK,GAAG,CAAA;AAEzD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,QAmG/E"}

package/dist/core-gateway/routes/chat.js

@@ -0,0 +1,149 @@
+import { streamSSE } from 'hono/streaming';
+import { chatRequestSchema } from '@tleblancureta/proto/shared';
+import { verifySecret } from '../auth.js';
+import { runClaude, streamClaude } from '../claude-runner.js';
+import { checkRateLimit } from '../rate-limiter.js';
+import { INTERNAL_SECRET } from '../config.js';
+/**
+ * Chat routes: WebSocket streaming (primary), REST /chat + /chat/stream
+ * (legacy), and /reset for Claude CLI session invalidation.
+ */
+export function registerChatRoutes(app, upgradeWebSocket) {
+    // --- WebSocket ---
+    app.get('/ws', upgradeWebSocket(() => {
+        let authenticated = false;
+        return {
+            onMessage(event, ws) {
+                try {
+                    const data = JSON.parse(event.data.toString());
+                    // First message must be auth
+                    if (!authenticated) {
+                        if (data.type === 'auth' && data.secret === INTERNAL_SECRET) {
+                            authenticated = true;
+                            ws.send(JSON.stringify({ type: 'auth', status: 'ok' }));
+                        }
+                        else {
+                            ws.send(JSON.stringify({ type: 'error', message: 'Unauthorized' }));
+                            ws.close(4001, 'Unauthorized');
+                        }
+                        return;
+                    }
+                    if (data.type === 'chat') {
+                        handleWsChat(data, ws);
+                    }
+                    else if (data.type === 'ping') {
+                        ws.send(JSON.stringify({ type: 'pong' }));
+                    }
+                }
+                catch (err) {
+                    ws.send(JSON.stringify({ type: 'error', message: err.message }));
+                }
+            },
+            onClose() { },
+            onError() { },
+        };
+    }));
+    // --- REST /reset ---
+    app.post('/reset', verifySecret, async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        const companyId = body?.company_id;
+        const sessionKey = body?.session_key;
+        if (!companyId)
+            return c.json({ error: 'company_id required' }, 400);
+        try {
+            const { join, resolve } = await import('node:path');
+            const { existsSync, rmSync } = await import('node:fs');
+            const dataRoot = process.env.DATA_DIR || '/data';
+            const slug = sessionKey ? `${companyId}/${sessionKey}` : companyId;
+            const sessionDir = resolve(dataRoot, 'sessions', slug);
+            const file = join(sessionDir, '.claude-session-id');
+            if (existsSync(file))
+                rmSync(file, { force: true });
+            return c.json({ ok: true });
+        }
+        catch (err) {
+            return c.json({ error: err.message || 'reset failed' }, 500);
+        }
+    });
+    // --- REST /chat ---
+    app.post('/chat', async (c) => {
+        const body = await c.req.json();
+        const parsed = chatRequestSchema.safeParse(body);
+        if (!parsed.success)
+            return c.json({ error: parsed.error.format() }, 400);
+        const { allowed, retryAfterMs } = checkRateLimit(parsed.data.company_id);
+        if (!allowed) {
+            const retryMin = Math.ceil((retryAfterMs || 0) / 60000);
+            return c.json({ error: `Rate limit exceeded. Try again in ${retryMin} minutes.` }, 429);
+        }
+        try {
+            const result = await runClaude(parsed.data);
+            return c.json(result);
+        }
+        catch (err) {
+            if (err.message?.includes('timed out'))
+                return c.json({ error: 'Claude Code session timed out' }, 504);
+            return c.json({ error: err.message || 'Claude Code error' }, 502);
+        }
+    });
+    // --- REST /chat/stream (SSE) ---
+    app.post('/chat/stream', async (c) => {
+        const body = await c.req.json();
+        const parsed = chatRequestSchema.safeParse(body);
+        if (!parsed.success)
+            return c.json({ error: parsed.error.format() }, 400);
+        const { allowed, retryAfterMs } = checkRateLimit(parsed.data.company_id);
+        if (!allowed) {
+            const retryMin = Math.ceil((retryAfterMs || 0) / 60000);
+            return c.json({ error: `Rate limit exceeded. Try again in ${retryMin} minutes.` }, 429);
+        }
+        return streamSSE(c, async (stream) => {
+            try {
+                for await (const event of streamClaude(parsed.data)) {
+                    await stream.writeSSE({ data: JSON.stringify(event) });
+                }
+            }
+            catch (err) {
+                await stream.writeSSE({ data: JSON.stringify({ type: 'error', message: err.message }) });
+            }
+        });
+    });
+}
+function safeSend(ws, data) {
+    try {
+        ws.send(data);
+        return true;
+    }
+    catch {
+        return false; // socket closed
+    }
+}
+async function handleWsChat(data, ws) {
+    const parsed = chatRequestSchema.safeParse(data);
+    if (!parsed.success) {
+        safeSend(ws, JSON.stringify({ type: 'error', message: 'Invalid request' }));
+        return;
+    }
+    const { allowed, retryAfterMs } = checkRateLimit(parsed.data.company_id);
+    if (!allowed) {
+        const retryMin = Math.ceil((retryAfterMs || 0) / 60000);
+        safeSend(ws, JSON.stringify({ type: 'error', message: `Rate limit. Retry in ${retryMin} min` }));
+        return;
+    }
+    try {
+        for await (const event of streamClaude(parsed.data)) {
+            if (!safeSend(ws, JSON.stringify(event))) {
+                // Client disconnected — break out so the generator can clean up
+                break;
+            }
+            // Push shell refresh on tool_result and result
+            if (event.type === 'tool_result' || event.type === 'result') {
+                safeSend(ws, JSON.stringify({ type: 'shell_refresh' }));
+            }
+        }
+    }
+    catch (err) {
+        safeSend(ws, JSON.stringify({ type: 'error', message: err.message }));
+    }
+}
+//# sourceMappingURL=chat.js.map

package/dist/core-gateway/routes/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../core-gateway/routes/chat.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAI9C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAS,EAAE,gBAAkC;IAC9E,oBAAoB;IACpB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,GAAG,EAAE;QACnC,IAAI,aAAa,GAAG,KAAK,CAAA;QAEzB,OAAO;YACL,SAAS,CAAC,KAAU,EAAE,EAAO;gBAC3B,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;oBAE9C,6BAA6B;oBAC7B,IAAI,CAAC,aAAa,EAAE,CAAC;wBACnB,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;4BAC5D,aAAa,GAAG,IAAI,CAAA;4BACpB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;wBACzD,CAAC;6BAAM,CAAC;4BACN,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;4BACnE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;wBAChC,CAAC;wBACD,OAAM;oBACR,CAAC;oBAED,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBACzB,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;oBACxB,CAAC;yBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;wBAChC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;oBAC3C,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;gBAClE,CAAC;YACH,CAAC;YACD,OAAO,KAAI,CAAC;YACZ,OAAO,KAAI,CAAC;SACb,CAAA;IACH,CAAC,CAAC,CAAC,CAAA;IAEH,sBAAsB;IACtB,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,MAAM,SAAS,GAAG,IAAI,EAAE,UAAU,CAAA;QAClC,MAAM,UAAU,GAAG,IAAI,EAAE,WAAW,CAAA;QACpC,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAA;QACpE,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAA;YACnD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;YACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAA;YAChD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;YAClE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;YACtD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;YACnD,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAC7B,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,cAAc,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,qBAAqB;IACrB,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAEzE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAA;YACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,QAAQ,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;QACzF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,GAAG,CAAC,CAAA;YACtG,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAA;QACnE,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,kCAAkC;IAClC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAC/B,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;QAEzE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAA;YACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,QAAQ,WAAW,EAAE,EAAE,GAAG,CAAC,CAAA;QACzF,CAAC;QAED,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACnC,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;gBACxD,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,EAAO,EAAE,IAAY;IACrC,IAAI,CAAC;QACH,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA,CAAC,gBAAgB;IAC/B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAS,EAAE,EAAO;IAC5C,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAA;QAC3E,OAAM;IACR,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAA;QACvD,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,QAAQ,MAAM,EAAE,CAAC,CAAC,CAAA;QAChG,OAAM;IACR,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACzC,gEAAgE;gBAChE,MAAK;YACP,CAAC;YAED,+CAA+C;YAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAA;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACvE,CAAC;AACH,CAAC"}

package/dist/core-gateway/routes/cron.d.ts

@@ -0,0 +1,13 @@
+import type { Hono } from 'hono';
+/**
+ * Cron control surface. Three responsibilities:
+ *   /cron/tick       — internal; called by pg_cron every minute
+ *   /cron/trigger    — manual; run a task right now ("run now" button)
+ *   /cron/list       — inspect tasks + next_run_at (debug / admin UI)
+ *
+ * Task CRUD is owned by the MCP tools (agent-facing) + direct DB access
+ * from the web frontend via supabase-js with RLS. The gateway only owns
+ * the dispatch layer.
+ */
+export declare function registerCronRoutes(app: Hono): void;
+//# sourceMappingURL=cron.d.ts.map

package/dist/core-gateway/routes/cron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.d.ts","sourceRoot":"","sources":["../../../core-gateway/routes/cron.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAMhC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,QA+D3C"}

package/dist/core-gateway/routes/cron.js

@@ -0,0 +1,79 @@
+import { verifySecret } from '../auth.js';
+import { getSupabase } from '../supabase.js';
+import { tick, dispatchTask, recalcNextRun, computeNextRun } from '../scheduler.js';
+import { isValidCronExpr } from '@tleblancureta/proto/shared';
+/**
+ * Cron control surface. Three responsibilities:
+ *   /cron/tick       — internal; called by pg_cron every minute
+ *   /cron/trigger    — manual; run a task right now ("run now" button)
+ *   /cron/list       — inspect tasks + next_run_at (debug / admin UI)
+ *
+ * Task CRUD is owned by the MCP tools (agent-facing) + direct DB access
+ * from the web frontend via supabase-js with RLS. The gateway only owns
+ * the dispatch layer.
+ */
+export function registerCronRoutes(app) {
+    // --- pg_cron webhook ---
+    app.post('/cron/tick', verifySecret, async (c) => {
+        const result = await tick();
+        return c.json({ ok: true, ...result });
+    });
+    // --- Manual trigger ---
+    app.post('/cron/trigger', verifySecret, async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        const taskId = body?.task_id;
+        const triggeredBy = body?.triggered_by || 'manual';
+        if (!taskId)
+            return c.json({ error: 'task_id required' }, 400);
+        const db = getSupabase();
+        const { data, error } = await db
+            .from('scheduled_tasks')
+            .select('*')
+            .eq('id', taskId)
+            .single();
+        if (error || !data)
+            return c.json({ error: 'task not found' }, 404);
+        // Dispatch in background — don't block the HTTP response
+        dispatchTask(data, { trigger: 'manual', triggeredBy }).catch(err => console.error('[cron] manual dispatch error', err));
+        return c.json({ ok: true, task_id: taskId, trigger: 'manual' });
+    });
+    // --- List tasks + next runs (debug / admin) ---
+    app.get('/cron/list', verifySecret, async (c) => {
+        const companyId = c.req.query('company_id');
+        const db = getSupabase();
+        let q = db
+            .from('scheduled_tasks')
+            .select('id, company_id, name, cron_expr, timezone, enabled, next_run_at, last_run_at, last_run_status')
+            .order('next_run_at', { ascending: true, nullsFirst: false });
+        if (companyId)
+            q = q.eq('company_id', companyId);
+        const { data, error } = await q;
+        if (error)
+            return c.json({ error: error.message }, 500);
+        return c.json({ tasks: data || [] });
+    });
+    // --- Recompute next_run for a task (called after CRUD in MCP tools) ---
+    app.post('/cron/recalc', verifySecret, async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        const taskId = body?.task_id;
+        if (!taskId)
+            return c.json({ error: 'task_id required' }, 400);
+        const next = await recalcNextRun(taskId);
+        return c.json({ ok: true, next_run_at: next?.toISOString() ?? null });
+    });
+    // --- Validate a cron expression (used by frontend form) ---
+    app.post('/cron/validate', verifySecret, async (c) => {
+        const body = await c.req.json().catch(() => ({}));
+        const expr = body?.cron_expr;
+        const tz = body?.timezone || 'America/Santiago';
+        if (!expr)
+            return c.json({ error: 'cron_expr required' }, 400);
+        if (!isValidCronExpr(expr))
+            return c.json({ valid: false, error: 'invalid format' });
+        const next = computeNextRun(expr, tz);
+        if (!next)
+            return c.json({ valid: false, error: 'unparseable' });
+        return c.json({ valid: true, next_run_at: next.toISOString() });
+    });
+}
+//# sourceMappingURL=cron.js.map

package/dist/core-gateway/routes/cron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cron.js","sourceRoot":"","sources":["../../../core-gateway/routes/cron.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC5C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAyB,MAAM,iBAAiB,CAAA;AAC1G,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAE7D;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAS;IAC1C,0BAA0B;IAC1B,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAA;QAC3B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,yBAAyB;IACzB,GAAG,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,IAAI,EAAE,OAA6B,CAAA;QAClD,MAAM,WAAW,GAAI,IAAI,EAAE,YAAmC,IAAI,QAAQ,CAAA;QAC1E,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;QAE9D,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;QACxB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE;aAC7B,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,GAAG,CAAC;aACX,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC;aAChB,MAAM,EAAE,CAAA;QACX,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAA;QAEnE,yDAAyD;QACzD,YAAY,CAAC,IAAwB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CACrF,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CACnD,CAAA;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,iDAAiD;IACjD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,EAAE,GAAG,WAAW,EAAE,CAAA;QACxB,IAAI,CAAC,GAAG,EAAE;aACP,IAAI,CAAC,iBAAiB,CAAC;aACvB,MAAM,CAAC,+FAA+F,CAAC;aACvG,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QAC/D,IAAI,SAAS;YAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC,CAAA;QAChD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAA;QAC/B,IAAI,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QACvD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,yEAAyE;IACzE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,IAAI,EAAE,OAA6B,CAAA;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAA;QACxC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,6DAA6D;IAC7D,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACjD,MAAM,IAAI,GAAG,IAAI,EAAE,SAA+B,CAAA;QAClD,MAAM,EAAE,GAAI,IAAI,EAAE,QAA+B,IAAI,kBAAkB,CAAA;QACvE,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAA;QAC9D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAA;QACpF,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAA;QAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/core-gateway/routes/gmail.d.ts

@@ -0,0 +1,8 @@
+import type { Hono } from 'hono';
+/**
+ * Gmail OAuth flow:
+ * - GET /gmail/auth → returns the Google consent URL (frontend opens it).
+ * - POST /gmail/callback → exchanges code for tokens, stores in Supabase.
+ */
+export declare function registerGmailRoutes(app: Hono): void;
+//# sourceMappingURL=gmail.d.ts.map

package/dist/core-gateway/routes/gmail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail.d.ts","sourceRoot":"","sources":["../../../core-gateway/routes/gmail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,IAAI,QA2D5C"}

package/dist/core-gateway/routes/gmail.js

@@ -0,0 +1,57 @@
+/**
+ * Gmail OAuth flow:
+ * - GET /gmail/auth → returns the Google consent URL (frontend opens it).
+ * - POST /gmail/callback → exchanges code for tokens, stores in Supabase.
+ */
+export function registerGmailRoutes(app) {
+    app.get('/gmail/auth', async (c) => {
+        const { google } = await import('googleapis');
+        const clientId = process.env.GMAIL_CLIENT_ID;
+        const clientSecret = process.env.GMAIL_CLIENT_SECRET;
+        const redirectUri = process.env.GMAIL_REDIRECT_URI || `${c.req.header('origin') || 'http://localhost:3001'}/gmail/callback`;
+        if (!clientId || !clientSecret)
+            return c.json({ error: 'Gmail not configured' }, 500);
+        const oauth2 = new google.auth.OAuth2(clientId, clientSecret, redirectUri);
+        const url = oauth2.generateAuthUrl({
+            access_type: 'offline',
+            prompt: 'consent',
+            scope: [
+                'https://www.googleapis.com/auth/gmail.readonly',
+                'https://www.googleapis.com/auth/gmail.send',
+            ],
+            state: c.req.query('user_id') || '',
+        });
+        return c.json({ url });
+    });
+    app.post('/gmail/callback', async (c) => {
+        const { google } = await import('googleapis');
+        const { code, user_id } = await c.req.json();
+        const clientId = process.env.GMAIL_CLIENT_ID;
+        const clientSecret = process.env.GMAIL_CLIENT_SECRET;
+        const redirectUri = process.env.GMAIL_REDIRECT_URI || 'http://localhost:3001/gmail/callback';
+        if (!clientId || !clientSecret)
+            return c.json({ error: 'Gmail not configured' }, 500);
+        const oauth2 = new google.auth.OAuth2(clientId, clientSecret, redirectUri);
+        try {
+            const { tokens } = await oauth2.getToken(code);
+            oauth2.setCredentials(tokens);
+            const gmail = google.gmail({ version: 'v1', auth: oauth2 });
+            const profile = await gmail.users.getProfile({ userId: 'me' });
+            const { createClient } = await import('@supabase/supabase-js');
+            const db = createClient(process.env.SUPABASE_URL, process.env.SUPABASE_SERVICE_ROLE_KEY);
+            await db.from('gmail_tokens').upsert({
+                user_id,
+                access_token: tokens.access_token,
+                refresh_token: tokens.refresh_token,
+                expiry_date: tokens.expiry_date,
+                email: profile.data.emailAddress,
+                updated_at: new Date().toISOString(),
+            });
+            return c.json({ email: profile.data.emailAddress, connected: true });
+        }
+        catch (err) {
+            return c.json({ error: err.message }, 400);
+        }
+    });
+}
+//# sourceMappingURL=gmail.js.map

package/dist/core-gateway/routes/gmail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail.js","sourceRoot":"","sources":["../../../core-gateway/routes/gmail.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAS;IAC3C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACjC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,uBAAuB,iBAAiB,CAAA;QAE3H,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAA;QAErF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC;YACjC,WAAW,EAAE,SAAS;YACtB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE;gBACL,gDAAgD;gBAChD,4CAA4C;aAC7C;YACD,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;SACpC,CAAC,CAAA;QAEF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;IAEF,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACtC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;QAC7C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAA;QAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;QAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAA;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,sCAAsC,CAAA;QAE5F,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,GAAG,CAAC,CAAA;QAErF,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAA;QAE1E,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC9C,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;YAE7B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YAE9D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAA;YAC9D,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,YAAa,EAAE,OAAO,CAAC,GAAG,CAAC,yBAA0B,CAAC,CAAA;YAE1F,MAAM,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;gBACnC,OAAO;gBACP,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY;gBAChC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAA;YAEF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAA;QAC5C,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/core-gateway/routes/health.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+export declare function registerHealthRoutes(app: Hono): void;
+//# sourceMappingURL=health.d.ts.map

package/dist/core-gateway/routes/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../core-gateway/routes/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAGhC,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,IAAI,QAI7C"}

package/dist/core-gateway/routes/health.js

@@ -0,0 +1,7 @@
+import { config } from '../config.js';
+export function registerHealthRoutes(app) {
+    app.get('/health', async (c) => {
+        return c.json({ status: 'ok', project: config.name, ws: true });
+    });
+}
+//# sourceMappingURL=health.js.map

package/dist/core-gateway/routes/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../core-gateway/routes/health.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAErC,MAAM,UAAU,oBAAoB,CAAC,GAAS;IAC5C,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/core-gateway/routes/upload.d.ts

@@ -0,0 +1,7 @@
+import type { Hono } from 'hono';
+/**
+ * Upload route: persists uploaded files to the per-session data dir so the
+ * Claude CLI subprocess can read them back. Files auto-delete after 5min.
+ */
+export declare function registerUploadRoutes(app: Hono): void;
+//# sourceMappingURL=upload.d.ts.map

package/dist/core-gateway/routes/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../../../core-gateway/routes/upload.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAEhC;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,IAAI,QAyB7C"}

package/dist/core-gateway/routes/upload.js

@@ -0,0 +1,31 @@
+/**
+ * Upload route: persists uploaded files to the per-session data dir so the
+ * Claude CLI subprocess can read them back. Files auto-delete after 5min.
+ */
+export function registerUploadRoutes(app) {
+    app.post('/upload', async (c) => {
+        const body = await c.req.parseBody();
+        const file = body['file'];
+        const companyId = body['company_id'];
+        const sessionKey = body['session_key'] || 'web';
+        if (!file || !companyId)
+            return c.json({ error: 'file and company_id required' }, 400);
+        const dataRoot = process.env.DATA_DIR || '/data';
+        const sessionDir = `${dataRoot}/sessions/${companyId}/${sessionKey}`;
+        const { mkdirSync, writeFileSync } = await import('node:fs');
+        mkdirSync(sessionDir, { recursive: true });
+        const filename = `${Date.now()}-${file.name}`;
+        const filepath = `${sessionDir}/${filename}`;
+        const buffer = Buffer.from(await file.arrayBuffer());
+        writeFileSync(filepath, buffer);
+        setTimeout(async () => {
+            try {
+                const { unlinkSync } = await import('node:fs');
+                unlinkSync(filepath);
+            }
+            catch { }
+        }, 30 * 60 * 1000);
+        return c.json({ path: filepath, filename });
+    });
+}
+//# sourceMappingURL=upload.js.map

package/dist/core-gateway/routes/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../../core-gateway/routes/upload.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAS;IAC5C,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAA;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAS,CAAA;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAW,CAAA;QAC9C,MAAM,UAAU,GAAI,IAAI,CAAC,aAAa,CAAY,IAAI,KAAK,CAAA;QAE3D,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,CAAC,CAAA;QAEtF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAA;QAChD,MAAM,UAAU,GAAG,GAAG,QAAQ,aAAa,SAAS,IAAI,UAAU,EAAE,CAAA;QACpE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;QAC5D,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1C,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAA;QAC7C,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAA;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;QACpD,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAE/B,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,IAAI,CAAC;gBAAC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACvF,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAElB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC"}