@townco/debugger 0.1.74 → 0.1.75

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@townco/debugger",
-  "version": "0.1.74",
+  "version": "0.1.75",
   "type": "module",
   "engines": {
     "bun": ">=1.3.0"
@@ -24,8 +24,8 @@
     "@radix-ui/react-select": "^2.2.6",
     "@radix-ui/react-slot": "^1.2.4",
     "@radix-ui/react-tabs": "^1.1.13",
-    "@townco/otlp-server": "0.1.73",
-    "@townco/tsconfig": "0.1.115",
+    "@townco/otlp-server": "0.1.74",
+    "@townco/tsconfig": "0.1.116",
     "@townco/ui": "^0.1.77",
     "bun-plugin-tailwind": "^0.1.2",
     "class-variance-authority": "^0.7.1",

package/src/server.ts

@@ -18,6 +18,62 @@ import type {
 export const DEFAULT_DEBUGGER_PORT = 4000;
 export const DEFAULT_OTLP_PORT = 4318;
 
+/**
+ * Middleware to check HTTP Basic Auth credentials
+ */
+function requireBasicAuth<T extends Request = Request>(
+  handler: (req: T) => Response | Promise<Response>,
+): (req: T) => Response | Promise<Response> {
+  return (req: T) => {
+    // Skip auth check for localhost
+    const url = new URL(req.url);
+    const isLocalhost =
+      url.hostname === "localhost" ||
+      url.hostname === "127.0.0.1" ||
+      url.hostname === "::1";
+
+    if (isLocalhost) {
+      return handler(req);
+    }
+
+    const username = Bun.env.BASIC_AUTH_USER;
+    const password = Bun.env.BASIC_AUTH_PASS;
+
+    // If credentials are not configured, allow access
+    if (!username || !password) {
+      return handler(req);
+    }
+
+    // Check Authorization header
+    const authHeader = req.headers.get("Authorization");
+    if (!authHeader || !authHeader.startsWith("Basic ")) {
+      return new Response("Unauthorized", {
+        status: 401,
+        headers: {
+          "WWW-Authenticate": 'Basic realm="Debugger"',
+        },
+      });
+    }
+
+    // Decode and verify credentials
+    const base64Credentials = authHeader.slice(6); // Remove "Basic " prefix
+    const credentials = atob(base64Credentials);
+    const [providedUsername, providedPassword] = credentials.split(":");
+
+    if (providedUsername !== username || providedPassword !== password) {
+      return new Response("Unauthorized", {
+        status: 401,
+        headers: {
+          "WWW-Authenticate": 'Basic realm="Debugger"',
+        },
+      });
+    }
+
+    // Credentials valid, proceed with handler
+    return handler(req);
+  };
+}
+
 /**
  * Creates the debugger API routes. Can be used standalone without starting a
  * server.
@@ -39,13 +95,13 @@ export function createDebuggerRoutes(options: {
 
   return defineRoutes({
     "/api/config": {
-      GET() {
+      GET: requireBasicAuth(() => {
         return Response.json({ agentName });
-      },
+      }),
     },
 
     "/api/reset-database": {
-      POST() {
+      POST: requireBasicAuth(() => {
         try {
           resetDb();
           return new Response("Database reset successfully", { status: 200 });
@@ -56,11 +112,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/sessions": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const url = new URL(req.url);
         const limit = Number.parseInt(
           url.searchParams.get("limit") || "1000",
@@ -72,11 +128,11 @@ export function createDebuggerRoutes(options: {
         );
         const sessions = db.listSessions(limit, offset);
         return Response.json(sessions);
-      },
+      }),
     },
 
     "/api/traces": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const url = new URL(req.url);
         const limit = Number.parseInt(
           url.searchParams.get("limit") || "50",
@@ -89,11 +145,11 @@ export function createDebuggerRoutes(options: {
         const sessionId = url.searchParams.get("sessionId") || undefined;
         const traces = db.listTraces(limit, offset, sessionId);
         return Response.json(traces);
-      },
+      }),
     },
 
     "/api/traces/:traceId": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const traceId = req.params.traceId;
         const data = db.getTraceById(traceId);
         if (!data.trace) {
@@ -102,11 +158,11 @@ export function createDebuggerRoutes(options: {
         // Extract messages on the server side
         const messages = extractTurnMessages(data.spans, data.logs);
         return Response.json({ ...data, messages });
-      },
+      }),
     },
 
     "/api/session-conversation": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const url = new URL(req.url);
         const sessionId = url.searchParams.get("sessionId");
         if (!sessionId) {
@@ -133,13 +189,13 @@ export function createDebuggerRoutes(options: {
         });
 
         return Response.json(conversation);
-      },
+      }),
     },
 
     // Town Hall API endpoints
 
     "/api/agent-config": {
-      async GET() {
+      GET: requireBasicAuth(async () => {
         const config = await fetchAgentConfig();
         if (!config) {
           return Response.json(
@@ -148,11 +204,11 @@ export function createDebuggerRoutes(options: {
           );
         }
         return Response.json(config);
-      },
+      }),
     },
 
     "/api/available-models": {
-      GET() {
+      GET: requireBasicAuth(() => {
         // List of supported models for comparison
         const models = [
           // Anthropic models
@@ -165,11 +221,11 @@ export function createDebuggerRoutes(options: {
           "gemini-1.5-flash",
         ];
         return Response.json({ models });
-      },
+      }),
     },
 
     "/api/session-first-message/:sessionId": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const sessionId = req.params.sessionId;
 
         // Query logs directly by session attribute to avoid race conditions
@@ -184,15 +240,15 @@ export function createDebuggerRoutes(options: {
         }
 
         return Response.json({ message });
-      },
+      }),
     },
 
     "/api/comparison-config": {
-      GET() {
+      GET: requireBasicAuth(() => {
         const config = comparisonDb.getLatestConfig();
         return Response.json(config);
-      },
-      async POST(req) {
+      }),
+      POST: requireBasicAuth(async (req) => {
         try {
           const body = await req.json();
           const config: ComparisonConfig = {
@@ -214,11 +270,11 @@ export function createDebuggerRoutes(options: {
             { status: 400 },
           );
         }
-      },
+      }),
     },
 
     "/api/comparison-config/:configId": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const configId = req.params.configId;
         const config = comparisonDb.getConfig(configId);
         if (!config) {
@@ -228,18 +284,18 @@ export function createDebuggerRoutes(options: {
           );
         }
         return Response.json(config);
-      },
+      }),
     },
 
     "/api/comparison-session-ids": {
-      GET() {
+      GET: requireBasicAuth(() => {
         const sessionIds = comparisonDb.getComparisonSessionIds();
         return Response.json({ sessionIds });
-      },
+      }),
     },
 
     "/api/comparison-runs": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const url = new URL(req.url);
         const limit = Number.parseInt(
           url.searchParams.get("limit") || "50",
@@ -258,11 +314,11 @@ export function createDebuggerRoutes(options: {
 
         const runs = comparisonDb.listRuns(limit, offset);
         return Response.json(runs);
-      },
+      }),
     },
 
     "/api/comparison-run/:runId": {
-      GET(req) {
+      GET: requireBasicAuth((req) => {
         const runId = req.params.runId;
         const run = comparisonDb.getRun(runId);
         if (!run) {
@@ -318,11 +374,11 @@ export function createDebuggerRoutes(options: {
           controlMetrics,
           variantMetrics,
         });
-      },
+      }),
     },
 
     "/api/run-comparison": {
-      async POST(req) {
+      POST: requireBasicAuth(async (req) => {
         try {
           const body = await req.json();
           const { sessionId, configId } = body;
@@ -391,11 +447,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/comparison-run/:runId/update": {
-      async POST(req) {
+      POST: requireBasicAuth(async (req) => {
         try {
           const runId = req.params.runId;
           const body = await req.json();
@@ -425,11 +481,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/session-metrics/:sessionId": {
-      async GET(req) {
+      GET: requireBasicAuth(async (req) => {
         const sessionId = req.params.sessionId;
         const url = new URL(req.url);
         const model = url.searchParams.get("model") || "unknown";
@@ -452,11 +508,11 @@ export function createDebuggerRoutes(options: {
         // Extract metrics
         const metrics = extractSessionMetrics(traces, allSpans, model);
         return Response.json(metrics);
-      },
+      }),
     },
 
     "/api/analyze-session/:sessionId": {
-      async POST(req) {
+      POST: requireBasicAuth(async (req) => {
         const sessionId = req.params.sessionId;
 
         try {
@@ -542,11 +598,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/analyze-all-sessions": {
-      async POST(req) {
+      POST: requireBasicAuth(async (req) => {
         try {
           const body = await req.json();
           const { sessionIds } = body as { sessionIds: string[] };
@@ -705,11 +761,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/session-analyses": {
-      async GET(req) {
+      GET: requireBasicAuth(async (req) => {
         try {
           const url = new URL(req.url);
           const sessionId = url.searchParams.get("sessionId");
@@ -750,11 +806,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/session-analyses/:sessionId/similar": {
-      async GET(req) {
+      GET: requireBasicAuth(async (req) => {
         try {
           const sessionId = req.params.sessionId;
           const url = new URL(req.url);
@@ -792,12 +848,12 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     // Comparison analysis endpoints
     "/api/analyze-comparison/:runId": {
-      async POST(req) {
+      POST: requireBasicAuth(async (req) => {
         const runId = req.params.runId;
 
         try {
@@ -902,11 +958,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/comparison-analysis/:runId": {
-      async GET(req) {
+      GET: requireBasicAuth(async (req) => {
         try {
           const runId = req.params.runId;
           const analysis = comparisonDb.getComparisonAnalysis(runId);
@@ -931,11 +987,11 @@ export function createDebuggerRoutes(options: {
             { status: 500 },
           );
         }
-      },
+      }),
     },
 
     "/api/comparison-analysis/:runId/exists": {
-      async GET(req) {
+      GET: requireBasicAuth(async (req) => {
         try {
           const runId = req.params.runId;
           const exists = comparisonDb.hasComparisonAnalysis(runId);
@@ -943,7 +999,7 @@ export function createDebuggerRoutes(options: {
         } catch (_error) {
           return Response.json({ exists: false });
         }
-      },
+      }),
     },
   });
 }