@viewportai/daemon 0.1.0 → 0.2.1

package/dist/server/http-health-routes.d.ts

@@ -0,0 +1,10 @@
+import type { FastifyInstance } from 'fastify';
+import type { Daemon } from '../core/daemon.js';
+import type { DaemonRelayBridgeStatus } from '../relay/daemon-relay-bridge.js';
+import type { DaemonRuntimeInfo } from './http-route-types.js';
+export declare function registerHealthRoutes(app: FastifyInstance, daemon: Daemon, options: {
+    getRelayStatus?: () => DaemonRelayBridgeStatus | null;
+    runtime?: DaemonRuntimeInfo;
+    startedAtFallback: number;
+}): void;
+//# sourceMappingURL=http-health-routes.d.ts.map

package/dist/server/http-health-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-health-routes.d.ts","sourceRoot":"","sources":["../../src/server/http-health-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IACP,cAAc,CAAC,EAAE,MAAM,uBAAuB,GAAG,IAAI,CAAC;IACtD,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;CAC3B,GACA,IAAI,CA2DN"}

package/dist/server/http-health-routes.js

@@ -0,0 +1,58 @@
+import { metrics } from '../core/metrics.js';
+import { resolveDaemonRuntimeIdentity } from '../core/runtime-identity.js';
+export function registerHealthRoutes(app, daemon, options) {
+    app.get('/health', async () => {
+        const runtime = options.runtime;
+        const memory = process.memoryUsage();
+        const relayEnabled = runtime?.relayEnabled ?? false;
+        const relayStatus = options.getRelayStatus?.() ?? null;
+        const machine = resolveDaemonRuntimeIdentity({
+            daemonConfig: daemon.configManager.getDaemonConfig(),
+            machineId: daemon.configManager.getMachineId(),
+            daemonVersion: runtime?.version ?? 'unknown',
+        });
+        return {
+            status: 'ok',
+            uptime: Math.floor((Date.now() - (runtime?.startedAt ?? options.startedAtFallback)) / 1000),
+            pid: process.pid,
+            startedAt: runtime?.startedAt ?? options.startedAtFallback,
+            now: Date.now(),
+            host: runtime?.host ?? '127.0.0.1',
+            port: runtime?.port ?? Number(process.env['PORT'] ?? 7070),
+            listen: runtime?.listen ?? `${runtime?.host ?? '127.0.0.1'}:${runtime?.port ?? 7070}`,
+            socketPath: runtime?.socketPath,
+            sessions: daemon.getActiveSessions().length,
+            directories: daemon.directoryManager.list().length,
+            agents: daemon.getAvailableAgents().join(', ') || 'none',
+            version: runtime?.version ?? '0.1.0',
+            machine,
+            process: {
+                node: process.version,
+                platform: process.platform,
+                arch: process.arch,
+                memoryRss: memory.rss,
+                memoryHeapUsed: memory.heapUsed,
+                memoryHeapTotal: memory.heapTotal,
+            },
+            relay: relayEnabled || relayStatus
+                ? {
+                    enabled: relayEnabled || !!relayStatus,
+                    state: relayStatus?.state ?? (relayEnabled ? 'connecting' : 'stopped'),
+                    reconnectAttempt: relayStatus?.reconnectAttempt ?? 0,
+                    lastErrorCode: relayStatus?.lastErrorCode,
+                    lastErrorMessage: relayStatus?.lastErrorMessage,
+                    lastErrorAt: relayStatus?.lastErrorAt,
+                    circuitOpenUntil: relayStatus?.circuitOpenUntil,
+                }
+                : undefined,
+        };
+    });
+    app.get('/api/metrics', async () => {
+        const snapshot = metrics.snapshot();
+        snapshot.gauges['sessions.active'] = daemon.getActiveSessions().length;
+        snapshot.gauges['directories.registered'] = daemon.directoryManager.list().length;
+        snapshot.gauges['uptime.seconds'] = Math.floor((Date.now() - options.startedAtFallback) / 1000);
+        return snapshot;
+    });
+}
+//# sourceMappingURL=http-health-routes.js.map

package/dist/server/http-health-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-health-routes.js","sourceRoot":"","sources":["../../src/server/http-health-routes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAI3E,MAAM,UAAU,oBAAoB,CAClC,GAAoB,EACpB,MAAc,EACd,OAIC;IAED,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,KAAK,CAAC;QACpD,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,IAAI,CAAC;QACvD,MAAM,OAAO,GAAG,4BAA4B,CAAC;YAC3C,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,eAAe,EAAE;YACpD,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE;YAC9C,aAAa,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS;SAC7C,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,IAAI,CAAC;YAC3F,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,iBAAiB;YAC1D,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACf,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,WAAW;YAClC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;YAC1D,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,WAAW,IAAI,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE;YACrF,UAAU,EAAE,OAAO,EAAE,UAAU;YAC/B,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM;YAC3C,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM;YAClD,MAAM,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;YACxD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,OAAO;YACpC,OAAO;YACP,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,cAAc,EAAE,MAAM,CAAC,QAAQ;gBAC/B,eAAe,EAAE,MAAM,CAAC,SAAS;aAClC;YACD,KAAK,EACH,YAAY,IAAI,WAAW;gBACzB,CAAC,CAAC;oBACE,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC,WAAW;oBACtC,KAAK,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,IAAI,CAAC;oBACpD,aAAa,EAAE,WAAW,EAAE,aAAa;oBACzC,gBAAgB,EAAE,WAAW,EAAE,gBAAgB;oBAC/C,WAAW,EAAE,WAAW,EAAE,WAAW;oBACrC,gBAAgB,EAAE,WAAW,EAAE,gBAAgB;iBAChD;gBACH,CAAC,CAAC,SAAS;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,IAAI,EAAE;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEpC,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC;QACvE,QAAQ,CAAC,MAAM,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC;QAClF,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC;QAEhG,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/http-lifecycle-routes.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from 'fastify';
+export declare function registerLifecycleRoutes(app: FastifyInstance, options: {
+    onLifecycleRestart?: () => Promise<void>;
+    onLifecycleShutdown?: () => Promise<void>;
+}): void;
+//# sourceMappingURL=http-lifecycle-routes.d.ts.map

package/dist/server/http-lifecycle-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-lifecycle-routes.d.ts","sourceRoot":"","sources":["../../src/server/http-lifecycle-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,eAAe,EACpB,OAAO,EAAE;IACP,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C,GACA,IAAI,CAgBN"}

package/dist/server/http-lifecycle-routes.js

@@ -0,0 +1,17 @@
+export function registerLifecycleRoutes(app, options) {
+    app.post('/api/lifecycle/shutdown', async (_request, reply) => {
+        if (!options.onLifecycleShutdown) {
+            return reply.status(404).send({ error: 'Lifecycle control unavailable' });
+        }
+        void options.onLifecycleShutdown();
+        return { status: 'shutdown_requested' };
+    });
+    app.post('/api/lifecycle/restart', async (_request, reply) => {
+        if (!options.onLifecycleRestart) {
+            return reply.status(404).send({ error: 'Lifecycle control unavailable' });
+        }
+        void options.onLifecycleRestart();
+        return { status: 'restart_requested' };
+    });
+}
+//# sourceMappingURL=http-lifecycle-routes.js.map

package/dist/server/http-lifecycle-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-lifecycle-routes.js","sourceRoot":"","sources":["../../src/server/http-lifecycle-routes.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CACrC,GAAoB,EACpB,OAGC;IAED,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC5D,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3D,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/http-pairing-routes.d.ts

@@ -0,0 +1,14 @@
+import type { FastifyInstance } from 'fastify';
+import type { SecurityProfile } from './security.js';
+import type { DaemonRuntimeInfo } from './http-route-types.js';
+interface RedeemAttemptEntry {
+    attempts: number[];
+    updatedAt: number;
+}
+export declare function recordRedeemAttempt(attemptsByIp: Map<string, RedeemAttemptEntry>, ip: string, nowMs: number): number;
+export declare function registerPairingRoutes(app: FastifyInstance, options?: {
+    runtime?: DaemonRuntimeInfo;
+    securityProfile?: SecurityProfile;
+}): void;
+export {};
+//# sourceMappingURL=http-pairing-routes.d.ts.map

package/dist/server/http-pairing-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-pairing-routes.d.ts","sourceRoot":"","sources":["../../src/server/http-pairing-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAW/D,UAAU,kBAAkB;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC7C,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,GACZ,MAAM,CA4BR;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,eAAe,EACpB,OAAO,CAAC,EAAE;IACR,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC,GACA,IAAI,CAmGN"}

package/dist/server/http-pairing-routes.js

@@ -0,0 +1,110 @@
+import { metrics } from '../core/metrics.js';
+import { issuePairingOffer, redeemPairingOffer } from './pairing-offers.js';
+import { PairOfferBodySchema, PairRedeemBodySchema, invalidPayloadError, } from './http-request-schemas.js';
+const REDEEM_WINDOW_MS = 60_000;
+const REDEEM_MAX_ATTEMPTS = 12;
+const REDEEM_ATTEMPT_IP_MAP_MAX = 2_048;
+export function recordRedeemAttempt(attemptsByIp, ip, nowMs) {
+    const staleBefore = nowMs - REDEEM_WINDOW_MS;
+    const previous = attemptsByIp.get(ip);
+    const freshAttempts = (previous?.attempts ?? []).filter((timestamp) => timestamp >= staleBefore);
+    freshAttempts.push(nowMs);
+    attemptsByIp.set(ip, {
+        attempts: freshAttempts,
+        updatedAt: nowMs,
+    });
+    if (attemptsByIp.size > REDEEM_ATTEMPT_IP_MAP_MAX) {
+        for (const [candidateIp, entry] of attemptsByIp.entries()) {
+            const newestAttempt = entry.attempts.at(-1);
+            if (typeof newestAttempt !== 'number' || newestAttempt < staleBefore) {
+                attemptsByIp.delete(candidateIp);
+            }
+        }
+    }
+    while (attemptsByIp.size > REDEEM_ATTEMPT_IP_MAP_MAX) {
+        const oldest = attemptsByIp.entries().next();
+        if (oldest.done) {
+            break;
+        }
+        attemptsByIp.delete(oldest.value[0]);
+    }
+    return freshAttempts.length;
+}
+export function registerPairingRoutes(app, options) {
+    const runtime = options?.runtime;
+    const securityProfile = options?.securityProfile;
+    const redeemAttemptTimestamps = new Map();
+    app.post('/api/pair/offer', async (request, reply) => {
+        const parsed = PairOfferBodySchema.safeParse(request.body ?? {});
+        if (!parsed.success) {
+            metrics.increment('pair.offer.invalid_payload');
+            return reply.status(400).send({ error: invalidPayloadError(parsed.error) });
+        }
+        const ttlSeconds = parsed.data.ttlSeconds ?? 600;
+        const host = runtime?.host ?? '127.0.0.1';
+        const port = runtime?.port ?? Number(process.env['PORT'] ?? 7070);
+        const listen = runtime?.listen ?? `${host}:${port}`;
+        const profile = securityProfile?.profile ?? 'local';
+        const issued = await issuePairingOffer({
+            ttlSeconds,
+            connection: {
+                host,
+                port,
+                listen,
+                socketPath: runtime?.socketPath,
+                profile,
+            },
+        });
+        metrics.increment('pair.offer.success');
+        return {
+            offerId: issued.offerId,
+            createdAt: issued.createdAt,
+            expiresAt: issued.expiresAt,
+            redeemSecret: issued.redeemSecret,
+            trustAnchor: issued.trustAnchor,
+            daemonDeviceId: issued.daemonDeviceId,
+            daemonPublicKey: issued.daemonPublicKey,
+            host: issued.host,
+            port: issued.port,
+            listen: issued.listen,
+            socketPath: issued.socketPath,
+            profile: issued.profile,
+        };
+    });
+    app.post('/api/pair/redeem', async (request, reply) => {
+        const ip = request.ip ?? 'unknown';
+        const attemptCount = recordRedeemAttempt(redeemAttemptTimestamps, ip, Date.now());
+        if (attemptCount > REDEEM_MAX_ATTEMPTS) {
+            metrics.increment('pair.redeem.rate_limited');
+            return reply.status(429).send({ error: 'Too many redeem attempts. Try again later.' });
+        }
+        const parsedBody = PairRedeemBodySchema.safeParse(request.body);
+        if (!parsedBody.success) {
+            metrics.increment('pair.redeem.invalid_payload');
+            return reply.status(400).send({ error: invalidPayloadError(parsedBody.error) });
+        }
+        const { offerId, proof, trustAnchor, clientPublicKey, clientProof } = parsedBody.data;
+        const redeemed = await redeemPairingOffer(offerId, proof, trustAnchor, clientPublicKey, clientProof);
+        if (!redeemed) {
+            metrics.increment('pair.redeem.failed');
+            return reply.status(404).send({ error: 'Offer not found or no longer valid' });
+        }
+        metrics.increment('pair.redeem.success');
+        return {
+            offerId: redeemed.offerId,
+            createdAt: redeemed.createdAt,
+            expiresAt: redeemed.expiresAt,
+            peerId: redeemed.peerId,
+            daemonDeviceId: redeemed.daemonDeviceId,
+            daemonPublicKey: redeemed.daemonPublicKey,
+            relayPairingPeerId: redeemed.relayPairingPeerId,
+            serverSignature: redeemed.serverSignature,
+            host: redeemed.connection.host,
+            port: redeemed.connection.port,
+            listen: redeemed.connection.listen,
+            socketPath: redeemed.connection.socketPath,
+            profile: redeemed.connection.profile,
+        };
+    });
+}
+//# sourceMappingURL=http-pairing-routes.js.map

package/dist/server/http-pairing-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-pairing-routes.js","sourceRoot":"","sources":["../../src/server/http-pairing-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAG5E,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,yBAAyB,GAAG,KAAK,CAAC;AAOxC,MAAM,UAAU,mBAAmB,CACjC,YAA6C,EAC7C,EAAU,EACV,KAAa;IAEb,MAAM,WAAW,GAAG,KAAK,GAAG,gBAAgB,CAAC;IAC7C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,IAAI,WAAW,CAAC,CAAC;IACjG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;QACnB,QAAQ,EAAE,aAAa;QACvB,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;IAEH,IAAI,YAAY,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QAClD,KAAK,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,GAAG,WAAW,EAAE,CAAC;gBACrE,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM;QACR,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,aAAa,CAAC,MAAM,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,GAAoB,EACpB,OAGC;IAED,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;IACjC,MAAM,eAAe,GAAG,OAAO,EAAE,eAAe,CAAC;IACjD,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAEtE,GAAG,CAAC,IAAI,CAIL,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC;QAC1C,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,eAAe,EAAE,OAAO,IAAI,OAAO,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,UAAU;YACV,UAAU,EAAE;gBACV,IAAI;gBACJ,IAAI;gBACJ,MAAM;gBACN,UAAU,EAAE,OAAO,EAAE,UAAU;gBAC/B,OAAO;aACR;SACF,CAAC,CAAC;QACH,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAQL,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QACnC,MAAM,YAAY,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClF,IAAI,YAAY,GAAG,mBAAmB,EAAE,CAAC;YACvC,OAAO,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4CAA4C,EAAE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;YACjD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,UAAU,CAAC,IAAI,CAAC;QAEtF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,OAAO,EACP,KAAK,EACL,WAAW,EACX,eAAe,EACf,WAAW,CACZ,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAEzC,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;YAC/C,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI;YAC9B,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI;YAC9B,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;YAClC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;YAC1C,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,OAAO;SACrC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/http-request-schemas.d.ts

@@ -0,0 +1,114 @@
+import { z } from 'zod';
+import type { WorkflowInputValue } from '../workflows/types.js';
+export declare const SessionModeBodySchema: z.ZodObject<{
+    mode: z.ZodEnum<{
+        detect: "detect";
+        bypass: "bypass";
+    }>;
+}, z.core.$strict>;
+export declare const WorktreeRollbackBodySchema: z.ZodObject<{
+    toSha: z.ZodString;
+}, z.core.$strict>;
+export declare const WorktreeRetryBodySchema: z.ZodObject<{
+    fromSha: z.ZodString;
+}, z.core.$strict>;
+export declare const WorktreeSquashBodySchema: z.ZodObject<{
+    targetBranch: z.ZodOptional<z.ZodString>;
+    commitMessage: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const PermissionRespondBodySchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    requestId: z.ZodString;
+    behavior: z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+    }>;
+    message: z.ZodOptional<z.ZodString>;
+    allowAlways: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const DirectoryRegisterBodySchema: z.ZodObject<{
+    path: z.ZodString;
+    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export declare const WorkflowValidateBodySchema: z.ZodObject<{
+    workflowPath: z.ZodOptional<z.ZodString>;
+    workflowYaml: z.ZodOptional<z.ZodString>;
+    workflowSourceRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const WorkflowRunBodySchema: z.ZodObject<{
+    workflowPath: z.ZodOptional<z.ZodString>;
+    workflowYaml: z.ZodOptional<z.ZodString>;
+    workflowSourceRef: z.ZodOptional<z.ZodString>;
+    workflowContract: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        sourceConfigPath: z.ZodOptional<z.ZodString>;
+        declaredPath: z.ZodOptional<z.ZodString>;
+        resource: z.ZodOptional<z.ZodString>;
+        version: z.ZodOptional<z.ZodString>;
+        declaredDigest: z.ZodOptional<z.ZodString>;
+        status: z.ZodEnum<{
+            verified: "verified";
+            undeclared: "undeclared";
+            digest_mismatch: "digest_mismatch";
+        }>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    directoryId: z.ZodString;
+    inputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodType<WorkflowInputValue, unknown, z.core.$ZodTypeInternals<WorkflowInputValue, unknown>>>>;
+    resourceId: z.ZodOptional<z.ZodString>;
+    runtimeTargetId: z.ZodOptional<z.ZodString>;
+    platformRunId: z.ZodOptional<z.ZodString>;
+    rerunOfWorkflowRunId: z.ZodOptional<z.ZodString>;
+    executionPolicy: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodEnum<{
+            current_tree: "current_tree";
+            isolated_worktree: "isolated_worktree";
+            named_branch: "named_branch";
+        }>;
+        branch: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    initiation: z.ZodOptional<z.ZodEnum<{
+        cli: "cli";
+        browser: "browser";
+        agent_skill: "agent_skill";
+    }>>;
+}, z.core.$strict>;
+export declare const WorkflowApprovalBodySchema: z.ZodObject<{
+    approved: z.ZodBoolean;
+    message: z.ZodOptional<z.ZodString>;
+    actor: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const WorkflowCancelBodySchema: z.ZodObject<{
+    message: z.ZodOptional<z.ZodString>;
+    actor: z.ZodOptional<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const PairRedeemBodySchema: z.ZodObject<{
+    offerId: z.ZodString;
+    proof: z.ZodString;
+    trustAnchor: z.ZodString;
+    clientPublicKey: z.ZodString;
+    clientProof: z.ZodString;
+}, z.core.$strict>;
+export declare const PairOfferBodySchema: z.ZodObject<{
+    ttlSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export declare const HookBodySchema: z.ZodObject<{
+    hook_event_name: z.ZodString;
+    session_id: z.ZodString;
+    transcript_path: z.ZodOptional<z.ZodString>;
+    cwd: z.ZodOptional<z.ZodString>;
+    permission_mode: z.ZodOptional<z.ZodString>;
+    adapter: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export declare function invalidPayloadError(error: z.ZodError): string;
+//# sourceMappingURL=http-request-schemas.d.ts.map

package/dist/server/http-request-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-request-schemas.d.ts","sourceRoot":"","sources":["../../src/server/http-request-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,eAAO,MAAM,qBAAqB;;;;;kBAA4D,CAAC;AAE/F,eAAO,MAAM,0BAA0B;;kBAAyD,CAAC;AAEjG,eAAO,MAAM,uBAAuB;;kBAA2D,CAAC;AAEhG,eAAO,MAAM,wBAAwB;;;kBAK1B,CAAC;AAEZ,eAAO,MAAM,2BAA2B;;;;;;;;;kBAQ7B,CAAC;AAEZ,eAAO,MAAM,2BAA2B;;;kBAK7B,CAAC;AAEZ,eAAO,MAAM,0BAA0B;;;;kBAUnC,CAAC;AAaL,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqC9B,CAAC;AAEL,eAAO,MAAM,0BAA0B;;;;;;;;;kBAc5B,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;kBAa1B,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;kBAQtB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;kBAIrB,CAAC;AAEZ,eAAO,MAAM,cAAc;;;;;;;iBAEX,CAAC;AAEjB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,MAAM,CAK7D"}

package/dist/server/http-request-schemas.js

@@ -0,0 +1,137 @@
+import { z } from 'zod';
+import { HookBaseInputSchema } from '../hooks/types.js';
+export const SessionModeBodySchema = z.object({ mode: z.enum(['detect', 'bypass']) }).strict();
+export const WorktreeRollbackBodySchema = z.object({ toSha: z.string().trim().min(1) }).strict();
+export const WorktreeRetryBodySchema = z.object({ fromSha: z.string().trim().min(1) }).strict();
+export const WorktreeSquashBodySchema = z
+    .object({
+    targetBranch: z.string().trim().min(1).optional(),
+    commitMessage: z.string().trim().min(1).optional(),
+})
+    .strict();
+export const PermissionRespondBodySchema = z
+    .object({
+    sessionId: z.string().trim().min(1),
+    requestId: z.string().trim().min(1),
+    behavior: z.enum(['allow', 'deny']),
+    message: z.string().trim().min(1).optional(),
+    allowAlways: z.boolean().optional(),
+})
+    .strict();
+export const DirectoryRegisterBodySchema = z
+    .object({
+    path: z.string().trim().min(1),
+    config: z.record(z.string(), z.unknown()).optional(),
+})
+    .strict();
+export const WorkflowValidateBodySchema = z
+    .object({
+    workflowPath: z.string().trim().min(1).optional(),
+    workflowYaml: z.string().trim().min(1).max(256_000).optional(),
+    workflowSourceRef: z.string().trim().min(1).optional(),
+})
+    .strict()
+    .refine((value) => Boolean(value.workflowPath || value.workflowYaml), {
+    message: 'workflowPath or workflowYaml is required',
+    path: ['workflowPath'],
+});
+const WorkflowInputValueSchema = z.lazy(() => z.union([
+    z.string(),
+    z.number(),
+    z.boolean(),
+    z.null(),
+    z.array(WorkflowInputValueSchema),
+    z.record(z.string(), WorkflowInputValueSchema),
+]));
+export const WorkflowRunBodySchema = z
+    .object({
+    workflowPath: z.string().trim().min(1).optional(),
+    workflowYaml: z.string().trim().min(1).max(256_000).optional(),
+    workflowSourceRef: z.string().trim().min(1).optional(),
+    workflowContract: z
+        .object({
+        id: z.string().trim().min(1).max(128).optional(),
+        sourceConfigPath: z.string().trim().min(1).max(4096).optional(),
+        declaredPath: z.string().trim().min(1).max(4096).optional(),
+        resource: z.string().trim().min(1).max(256).optional(),
+        version: z.string().trim().min(1).max(64).optional(),
+        declaredDigest: z.string().trim().min(1).max(256).optional(),
+        status: z.enum(['verified', 'undeclared', 'digest_mismatch']),
+        reason: z.string().trim().min(1).max(512).optional(),
+    })
+        .strict()
+        .optional(),
+    directoryId: z.string().trim().min(1),
+    inputs: z.record(z.string(), WorkflowInputValueSchema).optional(),
+    resourceId: z.string().trim().min(1).optional(),
+    runtimeTargetId: z.string().trim().min(1).optional(),
+    platformRunId: z.string().trim().min(1).optional(),
+    rerunOfWorkflowRunId: z.string().trim().min(1).optional(),
+    executionPolicy: z
+        .object({
+        mode: z.enum(['current_tree', 'isolated_worktree', 'named_branch']),
+        branch: z.string().trim().min(1).max(255).optional(),
+    })
+        .strict()
+        .optional(),
+    initiation: z.enum(['cli', 'browser', 'agent_skill']).optional(),
+})
+    .strict()
+    .refine((value) => Boolean(value.workflowPath || value.workflowYaml), {
+    message: 'workflowPath or workflowYaml is required',
+    path: ['workflowPath'],
+});
+export const WorkflowApprovalBodySchema = z
+    .object({
+    approved: z.boolean(),
+    message: z.string().trim().min(1).max(2_000).optional(),
+    actor: z
+        .object({
+        id: z.string().trim().min(1).max(255).optional(),
+        name: z.string().trim().min(1).max(255).optional(),
+        email: z.string().email().max(255).optional(),
+        source: z.string().trim().min(1).max(255).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const WorkflowCancelBodySchema = z
+    .object({
+    message: z.string().trim().min(1).max(2_000).optional(),
+    actor: z
+        .object({
+        id: z.string().trim().min(1).max(255).optional(),
+        name: z.string().trim().min(1).max(255).optional(),
+        email: z.string().email().max(255).optional(),
+        source: z.string().trim().min(1).max(255).optional(),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const PairRedeemBodySchema = z
+    .object({
+    offerId: z.string().trim().min(1),
+    proof: z.string().trim().min(1),
+    trustAnchor: z.string().trim().min(1),
+    clientPublicKey: z.string().trim().min(1),
+    clientProof: z.string().trim().min(1),
+})
+    .strict();
+export const PairOfferBodySchema = z
+    .object({
+    ttlSeconds: z.number().int().min(30).max(3600).optional(),
+})
+    .strict();
+export const HookBodySchema = HookBaseInputSchema.extend({
+    adapter: z.string().trim().min(1).max(64).optional(),
+}).passthrough();
+export function invalidPayloadError(error) {
+    const first = error.issues[0];
+    if (!first)
+        return 'Invalid payload';
+    const field = first.path.join('.') || '<root>';
+    return `Invalid payload at ${field}: ${first.message}`;
+}
+//# sourceMappingURL=http-request-schemas.js.map

package/dist/server/http-request-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-request-schemas.js","sourceRoot":"","sources":["../../src/server/http-request-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE/F,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEjG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC9D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE;IACpE,OAAO,EAAE,0CAA0C;IACnD,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC,CAAC;AAEL,MAAM,wBAAwB,GAAkC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAC1E,CAAC,CAAC,KAAK,CAAC;IACN,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,MAAM,EAAE;IACV,CAAC,CAAC,OAAO,EAAE;IACX,CAAC,CAAC,IAAI,EAAE;IACR,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IACjC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC;CAC/C,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC9D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,gBAAgB,EAAE,CAAC;SAChB,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC/D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC3D,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IACjE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,eAAe,EAAE,CAAC;SACf,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,mBAAmB,EAAE,cAAc,CAAC,CAAC;QACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE;IACpE,OAAO,EAAE,0CAA0C;IACnD,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC;KACxC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACvD,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrD,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,iBAAiB,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;IAC/C,OAAO,sBAAsB,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;AACzD,CAAC"}

package/dist/server/http-route-types.d.ts

@@ -0,0 +1,11 @@
+export interface DaemonRuntimeInfo {
+    pid: number;
+    host: string;
+    port: number;
+    listen?: string;
+    socketPath?: string;
+    startedAt: number;
+    version: string;
+    relayEnabled?: boolean;
+}
+//# sourceMappingURL=http-route-types.d.ts.map

package/dist/server/http-route-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-route-types.d.ts","sourceRoot":"","sources":["../../src/server/http-route-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB"}

package/dist/server/http-route-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=http-route-types.js.map

package/dist/server/http-route-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-route-types.js","sourceRoot":"","sources":["../../src/server/http-route-types.ts"],"names":[],"mappings":""}

package/dist/server/http-server.d.ts

@@ -9,15 +9,9 @@ import type { AgentRegistry } from '../core/agent-registry.js';
 import type { HookRouter } from '../hooks/router.js';
 import type { AuthProvider } from './auth.js';
 import type { SecurityProfile } from './security.js';
-export interface DaemonRuntimeInfo {
-    pid: number;
-    host: string;
-    port: number;
-    listen?: string;
-    socketPath?: string;
-    startedAt: number;
-    version: string;
-}
+import type { DaemonRelayBridgeStatus } from '../relay/daemon-relay-bridge.js';
+import type { DaemonRuntimeInfo } from './http-route-types.js';
+export { recordRedeemAttempt } from './http-pairing-routes.js';
 export interface HttpServerOptions {
     auth?: AuthProvider;
     hookRouter?: HookRouter;
@@ -25,6 +19,7 @@ export interface HttpServerOptions {
     securityProfile?: SecurityProfile;
     onLifecycleShutdown?: () => Promise<void>;
     onLifecycleRestart?: () => Promise<void>;
+    getRelayStatus?: () => DaemonRelayBridgeStatus | null;
 }
 export declare function registerHttpRoutes(app: FastifyInstance, daemon: Daemon, registry?: AgentRegistry, options?: HttpServerOptions): void;
 //# sourceMappingURL=http-server.d.ts.map

package/dist/server/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/server/http-server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAkDrD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAYD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,aAAa,EACxB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CA8lBN"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../../src/server/http-server.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAG/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAO/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAmB/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,cAAc,CAAC,EAAE,MAAM,uBAAuB,GAAG,IAAI,CAAC;CACvD;AAYD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,aAAa,EACxB,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CA4aN"}