@w3kits-com/plugin-opendesign 0.1.8 → 0.1.10

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/redact.js

@@ -0,0 +1,179 @@
+// Lexical secret / PII scrubber for telemetry payloads.
+//
+// Runs before any prompt or assistant text is sent to Langfuse. The
+// patterns here are intentionally conservative: each one matches a
+// well-defined token shape with extremely low false-positive rate (API
+// keys have a fixed prefix, JWTs have the "header.payload.signature"
+// triple, credit-card matches go through a Luhn check). What this file
+// does NOT do — and the user-facing copy must reflect that — is detect
+// names, addresses, business secrets, or anything that requires
+// understanding the meaning of the surrounding text. That's an ML / LLM
+// problem the daemon can't take on.
+//
+// Output format: every match is replaced by `[REDACTED:<kind>]` so a
+// reviewer reading a Langfuse trace can see exactly which category
+// fired without recovering the original value.
+//
+// References:
+// - Langfuse client-side masking guidance:
+//   https://langfuse.com/docs/observability/features/masking
+// - GitHub token format:
+//   https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-authentication-to-github
+// - AWS access key shape: 'AKIA' + 16 uppercase alphanumerics.
+// - Luhn algorithm (credit cards): https://en.wikipedia.org/wiki/Luhn_algorithm
+// Order matters: list specific rules before more general ones. Langfuse
+// keys (`sk-lf-...`) would otherwise be eaten by the generic `sk-...`
+// rule and labeled as a generic OpenAI-style key.
+const PATTERNS = [
+    // Langfuse public/secret keys (pk-lf- / sk-lf-). Must run before the
+    // generic sk- rule so the more specific label wins.
+    { name: 'langfuse_key', regex: /\b(?:pk|sk)-lf-[A-Za-z0-9-]{16,}\b/g },
+    // Anthropic / OpenAI-style keys: 'sk-' + optional sub-prefix + base64-ish.
+    // Both vendors plus a long tail of OpenAI-compatible providers (DeepSeek,
+    // MiniMax, Together, etc.) ship keys in this shape, so a single rule
+    // covers most "sk-..." secrets a user might paste into a prompt.
+    { name: 'sk_key', regex: /\bsk-(?:proj-|live-|test-|ant-)?[A-Za-z0-9_-]{20,}\b/g },
+    // GitHub personal / OAuth / server / user-server / refresh tokens.
+    { name: 'github_token', regex: /\bgh[opsur]_[A-Za-z0-9]{36,251}\b/g },
+    // GitHub legacy 40-hex personal access tokens that ship with no prefix
+    // are indistinguishable from a sha1 hash, so we don't try to match them
+    // here — false positives would be brutal in commit logs / artifact slugs.
+    // AWS access key id. The matching secret access key is just 40 base64
+    // chars with no fixed shape, so we cannot reliably redact it without
+    // huge collateral damage; flagging the access key id at least
+    // signals a paste happened.
+    { name: 'aws_access_key', regex: /\bAKIA[0-9A-Z]{16}\b/g },
+    // Google API keys (Firebase / Maps / etc.).
+    { name: 'google_api_key', regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    // Slack tokens.
+    { name: 'slack_token', regex: /\bxox[abprs]-[0-9A-Za-z-]{10,}\b/g },
+    // Stripe keys.
+    { name: 'stripe_key', regex: /\b(?:sk|pk|rk)_(?:live|test)_[0-9a-zA-Z]{16,}\b/g },
+    // JSON Web Tokens. The "header.payload.signature" triple is distinctive
+    // enough that false positives are rare (the literal "eyJ" prefix is the
+    // base64 encoding of '{"' which is how every JOSE header starts).
+    { name: 'jwt', regex: /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g },
+    // Bearer tokens in HTTP Authorization header copy/paste. We only match
+    // the value, not the literal 'Bearer ', so the marker stays readable in
+    // the redacted output ("Authorization: Bearer [REDACTED:bearer_token]").
+    { name: 'bearer_token', regex: /(?<=\bBearer\s+)[A-Za-z0-9._~+/-]{16,}={0,2}/g },
+    // Email addresses. Conservative enough to require a TLD-like trailer.
+    { name: 'email', regex: /\b[\w.+-]+@[\w-]+\.[\w.-]+\b/g },
+    // IPv4. Reject all-zero / 255.255.255.255-ish junk shapes by gating on
+    // each octet being 0-255.
+    {
+        name: 'ipv4',
+        regex: /\b(?:(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\b/g,
+    },
+    // Phone numbers. Tight US-leaning shape; a global PII detector would
+    // need a real lib. We keep this so US-based test prompts ('call me at
+    // (415) 555-...') don't ship. Note: no leading \b — '(' isn't a word
+    // char, so a starting boundary would refuse to match `(415)`. We
+    // require a non-digit (or start of string) before the run instead.
+    {
+        name: 'phone',
+        regex: /(?<!\d)(?:\+?\d{1,3}[\s.-]?)?(?:\(\d{3}\)|\d{3})[\s.-]?\d{3}[\s.-]?\d{4}(?!\d)/g,
+    },
+];
+// Credit card sweep is special: a naive 13-19 digit run matches a lot of
+// non-card numbers (timestamps, IDs, hashes). We isolate the candidate
+// then run a Luhn check before redacting.
+const CARD_CANDIDATE = /\b(?:\d[ -]?){12,18}\d\b/g;
+const API_KEY_HEADER = /(^|[^?&\w-])("?)(x-api-key|api-key|x-goog-api-key)\2(\s*[:=]\s*)("[^"]*"|[^\s,;"'#}]+)/gi;
+const API_KEY_QUERY = /([?&](?:key|api_key|api-key)=)[^&#\s,;"']+/gi;
+function isLuhnValid(digits) {
+    if (digits.length < 13 || digits.length > 19)
+        return false;
+    let sum = 0;
+    let alt = false;
+    for (let i = digits.length - 1; i >= 0; i -= 1) {
+        let d = digits.charCodeAt(i) - 48;
+        if (d < 0 || d > 9)
+            return false;
+        if (alt) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+        alt = !alt;
+    }
+    return sum % 10 === 0;
+}
+function redactApiKeyHeaderValue(prefix, quote, name, separator, value) {
+    const redactedValue = value.startsWith('"')
+        ? '"[REDACTED:api_key_header]"'
+        : '[REDACTED:api_key_header]';
+    return `${prefix}${quote}${name}${quote}${separator}${redactedValue}`;
+}
+/**
+ * Returns `input` with every recognised secret / PII pattern replaced by
+ * a `[REDACTED:<kind>]` marker. Idempotent — re-running on already
+ * redacted text only matches new tokens.
+ *
+ * Empty / non-string input passes through unchanged so the caller can
+ * use this as a no-op on optional fields.
+ */
+export function redactSecrets(input) {
+    if (!input)
+        return input;
+    let out = input;
+    for (const { name, regex } of PATTERNS) {
+        out = out.replace(regex, `[REDACTED:${name}]`);
+    }
+    out = out
+        .replace(API_KEY_HEADER, (_match, prefix, quote, name, separator, value) => redactApiKeyHeaderValue(prefix, quote, name, separator, value))
+        .replace(API_KEY_QUERY, '$1[REDACTED:api_key_query]');
+    out = out.replace(CARD_CANDIDATE, (match) => {
+        const digits = match.replace(/\D/g, '');
+        return isLuhnValid(digits) ? '[REDACTED:credit_card]' : match;
+    });
+    return out;
+}
+/**
+ * Same as `redactSecrets` but also returns per-category counts so the
+ * caller can attach an audit summary to the trace metadata
+ * ('we stripped 2 keys + 1 email before send').
+ */
+export function redactSecretsWithCounts(input) {
+    const counts = {};
+    if (!input)
+        return { redacted: input, counts };
+    let out = input;
+    for (const { name, regex } of PATTERNS) {
+        let matched = 0;
+        out = out.replace(regex, () => {
+            matched += 1;
+            return `[REDACTED:${name}]`;
+        });
+        if (matched > 0)
+            counts[name] = matched;
+    }
+    let apiKeyHeaderCount = 0;
+    out = out.replace(API_KEY_HEADER, (_match, prefix, quote, name, separator, value) => {
+        apiKeyHeaderCount += 1;
+        return redactApiKeyHeaderValue(prefix, quote, name, separator, value);
+    });
+    if (apiKeyHeaderCount > 0)
+        counts.api_key_header = apiKeyHeaderCount;
+    let apiKeyQueryCount = 0;
+    out = out.replace(API_KEY_QUERY, (_match, prefix) => {
+        apiKeyQueryCount += 1;
+        return `${prefix}[REDACTED:api_key_query]`;
+    });
+    if (apiKeyQueryCount > 0)
+        counts.api_key_query = apiKeyQueryCount;
+    let cardCount = 0;
+    out = out.replace(CARD_CANDIDATE, (match) => {
+        const digits = match.replace(/\D/g, '');
+        if (isLuhnValid(digits)) {
+            cardCount += 1;
+            return '[REDACTED:credit_card]';
+        }
+        return match;
+    });
+    if (cardCount > 0)
+        counts.credit_card = cardCount;
+    return { redacted: out, counts };
+}
+//# sourceMappingURL=redact.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,uEAAuE;AACvE,gEAAgE;AAChE,wEAAwE;AACxE,oCAAoC;AACpC,EAAE;AACF,qEAAqE;AACrE,mEAAmE;AACnE,+CAA+C;AAC/C,EAAE;AACF,cAAc;AACd,2CAA2C;AAC3C,6DAA6D;AAC7D,yBAAyB;AACzB,kHAAkH;AAClH,+DAA+D;AAC/D,gFAAgF;AAOhF,wEAAwE;AACxE,sEAAsE;AACtE,kDAAkD;AAClD,MAAM,QAAQ,GAAuB;IACnC,qEAAqE;IACrE,oDAAoD;IACpD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,qCAAqC,EAAE;IAEtE,2EAA2E;IAC3E,0EAA0E;IAC1E,qEAAqE;IACrE,iEAAiE;IACjE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,uDAAuD,EAAE;IAElF,mEAAmE;IACnE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,oCAAoC,EAAE;IAErE,uEAAuE;IACvE,wEAAwE;IACxE,0EAA0E;IAE1E,sEAAsE;IACtE,qEAAqE;IACrE,8DAA8D;IAC9D,4BAA4B;IAC5B,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAE1D,4CAA4C;IAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAE/D,gBAAgB;IAChB,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,mCAAmC,EAAE;IAEnE,eAAe;IACf,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kDAAkD,EAAE;IAEjF,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,2DAA2D,EAAE;IAEnF,uEAAuE;IACvE,wEAAwE;IACxE,yEAAyE;IACzE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,+CAA+C,EAAE;IAEhF,sEAAsE;IACtE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAEzD,uEAAuE;IACvE,0BAA0B;IAC1B;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,8EAA8E;KACtF;IAED,qEAAqE;IACrE,sEAAsE;IACtE,qEAAqE;IACrE,iEAAiE;IACjE,mEAAmE;IACnE;QACE,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,iFAAiF;KACzF;CACF,CAAC;AAEF,yEAAyE;AACzE,uEAAuE;AACvE,0CAA0C;AAC1C,MAAM,cAAc,GAAG,2BAA2B,CAAC;AACnD,MAAM,cAAc,GAClB,0FAA0F,CAAC;AAC7F,MAAM,aAAa,GAAG,8CAA8C,CAAC;AAErE,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,GAAG,EAAE,CAAC;YACR,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,GAAG,GAAG,CAAC,GAAG,CAAC;IACb,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAAc,EACd,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,KAAa;IAEb,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,2BAA2B,CAAC;IAChC,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,SAAS,GAAG,aAAa,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,IAAI,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,GAAG,GAAG,GAAG;SACN,OAAO,CACN,cAAc,EACd,CACE,MAAM,EACN,MAAc,EACd,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,KAAa,EACb,EAAE,CAAC,uBAAuB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CACpE;SACA,OAAO,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IACxD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,KAAK,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IAInD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/C,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE;YAC5B,OAAO,IAAI,CAAC,CAAC;YACb,OAAO,aAAa,IAAI,GAAG,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC1C,CAAC;IACD,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,cAAc,EACd,CACE,MAAM,EACN,MAAc,EACd,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,KAAa,EACb,EAAE;QACF,iBAAiB,IAAI,CAAC,CAAC;QACvB,OAAO,uBAAuB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IACxE,CAAC,CACF,CAAC;IACF,IAAI,iBAAiB,GAAG,CAAC;QAAE,MAAM,CAAC,cAAc,GAAG,iBAAiB,CAAC;IACrE,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,EAAE;QAC1D,gBAAgB,IAAI,CAAC,CAAC;QACtB,OAAO,GAAG,MAAM,0BAA0B,CAAC;IAC7C,CAAC,CAAC,CAAC;IACH,IAAI,gBAAgB,GAAG,CAAC;QAAE,MAAM,CAAC,aAAa,GAAG,gBAAgB,CAAC;IAClE,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,SAAS,IAAI,CAAC,CAAC;YACf,OAAO,wBAAwB,CAAC;QAClC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,IAAI,SAAS,GAAG,CAAC;QAAE,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC;IAClD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/cli-args.d.ts

@@ -0,0 +1,5 @@
+export interface ResearchSubcommandArgs {
+    sub: string | undefined;
+    subArgs: string[];
+}
+export declare function splitResearchSubcommand(args: string[]): ResearchSubcommandArgs;

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/cli-args.js

@@ -0,0 +1,11 @@
+export function splitResearchSubcommand(args) {
+    const sub = args.find((a) => a && !a.startsWith('--'));
+    if (!sub)
+        return { sub: undefined, subArgs: args };
+    const idx = args.indexOf(sub);
+    return {
+        sub,
+        subArgs: [...args.slice(0, idx), ...args.slice(idx + 1)],
+    };
+}
+//# sourceMappingURL=cli-args.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/cli-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../../src/research/cli-args.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,uBAAuB,CAAC,IAAc;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO;QACL,GAAG;QACH,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;KACzD,CAAC;AACJ,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/index.d.ts

@@ -0,0 +1,14 @@
+import type { ResearchFindings } from '@open-design/contracts/api/research';
+export declare class ResearchError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(message: string, status?: number, code?: string);
+}
+export interface SearchResearchInput {
+    query: string;
+    projectRoot: string;
+    maxSources?: number;
+    providers?: string[];
+    signal?: AbortSignal;
+}
+export declare function searchResearch(input: SearchResearchInput): Promise<ResearchFindings>;

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/index.js

@@ -0,0 +1,78 @@
+import { resolveProviderConfig } from '../media-config.js';
+import { tavilySearch, TavilyError } from './tavily.js';
+const DEFAULT_MAX_SOURCES = 5;
+const TAVILY_MAX_RESULTS_LIMIT = 20;
+export class ResearchError extends Error {
+    status;
+    code;
+    constructor(message, status = 400, code = 'RESEARCH_FAILED') {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.name = 'ResearchError';
+    }
+}
+export async function searchResearch(input) {
+    const query = (input.query?.trim() || '').slice(0, 1000);
+    if (!query) {
+        throw new ResearchError('query required', 400, 'QUERY_REQUIRED');
+    }
+    const depth = 'shallow';
+    const requested = Array.isArray(input.providers) ? input.providers : [];
+    const providers = requested.filter((p) => typeof p === 'string' && p.length > 0);
+    const provider = providers[0] ?? 'tavily';
+    const maxSources = clampMaxSources(input.maxSources);
+    if (provider !== 'tavily') {
+        throw new ResearchError(`provider "${provider}" not supported in Phase 1`, 400, 'UNSUPPORTED_RESEARCH_PROVIDER');
+    }
+    const cfg = await resolveProviderConfig(input.projectRoot, 'tavily');
+    if (!cfg.apiKey) {
+        throw new ResearchError('Tavily API key not configured (Settings -> Tavily Search)', 400, 'TAVILY_API_KEY_MISSING');
+    }
+    let answer = '';
+    let sources = [];
+    try {
+        const out = await tavilySearch({
+            apiKey: cfg.apiKey,
+            query,
+            searchDepth: 'basic',
+            maxResults: maxSources,
+            includeAnswer: true,
+            ...(cfg.baseUrl ? { baseUrl: cfg.baseUrl } : {}),
+            ...(input.signal ? { signal: input.signal } : {}),
+        });
+        answer = out.answer;
+        sources = out.sources;
+    }
+    catch (err) {
+        const message = err instanceof TavilyError
+            ? err.message
+            : `research failed: ${err.message || String(err)}`;
+        throw new ResearchError(message, 502, 'RESEARCH_PROVIDER_FAILED');
+    }
+    if (sources.length === 0) {
+        throw new ResearchError('no sources found', 404, 'NO_RESEARCH_SOURCES');
+    }
+    return {
+        query,
+        summary: answer || synthesizeFallbackSummary(sources),
+        sources,
+        provider,
+        depth,
+        fetchedAt: Date.now(),
+    };
+}
+function synthesizeFallbackSummary(sources) {
+    const lead = sources
+        .slice(0, 5)
+        .map((s, i) => `- [${i + 1}] ${s.title}: ${s.snippet.slice(0, 200)}`)
+        .join('\n');
+    return `(No provider summary; top snippets follow.)\n${lead}`;
+}
+function clampMaxSources(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
+        return DEFAULT_MAX_SOURCES;
+    }
+    return Math.max(1, Math.min(Math.floor(value), TAVILY_MAX_RESULTS_LIMIT));
+}
+//# sourceMappingURL=index.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/research/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC,MAAM,OAAO,aAAc,SAAQ,KAAK;IAGpB;IACA;IAHlB,YACE,OAAe,EACC,SAAS,GAAG,EACZ,OAAO,iBAAiB;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,WAAM,GAAN,MAAM,CAAM;QACZ,SAAI,GAAJ,IAAI,CAAoB;QAGxC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAUD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAkB,SAAS,CAAC;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAChC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CACnE,CAAC;IACF,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAErD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CACrB,aAAa,QAAQ,4BAA4B,EACjD,GAAG,EACH,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,aAAa,CACrB,2DAA2D,EAC3D,GAAG,EACH,wBAAwB,CACzB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,OAAO,GAAqB,EAAE,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC;YAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK;YACL,WAAW,EAAE,OAAO;YACpB,UAAU,EAAE,UAAU;YACtB,aAAa,EAAE,IAAI;YACnB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QACpB,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,WAAW;YACxB,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,oBAAqB,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,0BAA0B,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO;QACL,KAAK;QACL,OAAO,EAAE,MAAM,IAAI,yBAAyB,CAAC,OAAO,CAAC;QACrD,OAAO;QACP,QAAQ;QACR,KAAK;QACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAyB;IAC1D,MAAM,IAAI,GAAG,OAAO;SACjB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;SACpE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,gDAAgD,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC,CAAC,CAAC;AAC5E,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/tavily.d.ts

@@ -0,0 +1,19 @@
+import type { ResearchSource } from '@open-design/contracts/api/research';
+export interface TavilySearchInput {
+    apiKey: string;
+    baseUrl?: string;
+    query: string;
+    searchDepth?: 'basic' | 'advanced';
+    maxResults?: number;
+    includeAnswer?: boolean;
+    signal?: AbortSignal;
+}
+export interface TavilySearchOutput {
+    answer: string;
+    sources: ResearchSource[];
+}
+export declare class TavilyError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+export declare function tavilySearch(input: TavilySearchInput): Promise<TavilySearchOutput>;

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/tavily.js

@@ -0,0 +1,78 @@
+const DEFAULT_BASE_URL = 'https://api.tavily.com';
+const DEFAULT_TIMEOUT_MS = 30_000;
+const TAVILY_MAX_RESULTS_LIMIT = 20;
+export class TavilyError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'TavilyError';
+    }
+}
+export async function tavilySearch(input) {
+    if (!input.apiKey) {
+        throw new TavilyError('Tavily API key is not configured');
+    }
+    const base = (input.baseUrl || DEFAULT_BASE_URL).replace(/\/+$/, '');
+    const requestedMax = input.maxResults ?? 5;
+    const maxResults = Math.max(0, Math.min(requestedMax, TAVILY_MAX_RESULTS_LIMIT));
+    const body = {
+        query: input.query,
+        search_depth: input.searchDepth ?? 'basic',
+        max_results: maxResults,
+        include_answer: input.includeAnswer ?? true,
+        include_raw_content: false,
+    };
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), DEFAULT_TIMEOUT_MS);
+    if (input.signal) {
+        input.signal.addEventListener('abort', () => ctrl.abort(), { once: true });
+    }
+    let resp;
+    try {
+        resp = await fetch(`${base}/search`, {
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                authorization: `Bearer ${input.apiKey}`,
+            },
+            body: JSON.stringify(body),
+            signal: ctrl.signal,
+        });
+    }
+    catch (err) {
+        throw new TavilyError(`Tavily request failed: ${err.message || String(err)}`);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    if (!resp.ok) {
+        const text = await resp.text().catch(() => '');
+        throw new TavilyError(`Tavily ${resp.status}: ${text.slice(0, 200) || 'no body'}`, resp.status);
+    }
+    const json = (await resp.json());
+    const answer = typeof json.answer === 'string' ? json.answer : '';
+    const rawResults = Array.isArray(json.results) ? json.results : [];
+    const sources = [];
+    for (const r of rawResults) {
+        const url = typeof r.url === 'string' ? r.url : '';
+        if (!url)
+            continue;
+        const publishedAt = typeof r.published_date === 'string' && r.published_date.trim()
+            ? r.published_date.trim()
+            : null;
+        sources.push({
+            title: typeof r.title === 'string' && r.title.trim()
+                ? r.title.trim()
+                : url,
+            url,
+            snippet: typeof r.content === 'string'
+                ? r.content.trim().slice(0, 800)
+                : '',
+            provider: 'tavily',
+            ...(publishedAt ? { publishedAt } : {}),
+        });
+    }
+    return { answer, sources };
+}
+//# sourceMappingURL=tavily.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/research/tavily.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tavily.js","sourceRoot":"","sources":["../../src/research/tavily.ts"],"names":[],"mappings":"AAEA,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAClD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AA8BpC,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGlB;IAFlB,YACE,OAAe,EACC,MAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,WAAM,GAAN,MAAM,CAAS;QAG/B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB;IAExB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,wBAAwB,CAAC,CACjD,CAAC;IACF,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO;QAC1C,WAAW,EAAE,UAAU;QACvB,cAAc,EAAE,KAAK,CAAC,aAAa,IAAI,IAAI;QAC3C,mBAAmB,EAAE,KAAK;KAC3B,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CACnB,0BAA2B,GAAa,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAClE,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,WAAW,CACnB,UAAU,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,EAC3D,IAAI,CAAC,MAAM,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,UAA+B,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,WAAW,GACf,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE;YAC7D,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE;YACzB,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EACH,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;gBAC3C,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;gBAChB,CAAC,CAAC,GAAG;YACT,GAAG;YACH,OAAO,EACL,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;gBAC3B,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAChC,CAAC,CAAC,EAAE;YACR,QAAQ,EAAE,QAAQ;YAClB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/route-context-contract.d.ts

@@ -0,0 +1,16 @@
+import type { ServerContext } from './server-context.js';
+import type { RegisterActiveContextRoutesDeps } from './active-context-routes.js';
+import type { RegisterChatRoutesDeps } from './chat-routes.js';
+import type { RegisterDeployRoutesDeps, RegisterDeploymentCheckRoutesDeps } from './deploy-routes.js';
+import type { RegisterFinalizeRoutesDeps, RegisterImportRoutesDeps, RegisterProjectExportRoutesDeps } from './import-export-routes.js';
+import type { RegisterLiveArtifactRoutesDeps } from './live-artifact-routes.js';
+import type { RegisterMcpRoutesDeps } from './mcp-routes.js';
+import type { RegisterMediaRoutesDeps } from './media-routes.js';
+import type { RegisterProjectArtifactRoutesDeps, RegisterProjectFileRoutesDeps, RegisterProjectRoutesDeps, RegisterProjectUploadRoutesDeps } from './project-routes.js';
+import type { RegisterRoutineRoutesDeps } from './routine-routes.js';
+import type { RegisterStaticResourceRoutesDeps } from './static-resource-routes.js';
+type AllRegisteredRouteDeps = RegisterActiveContextRoutesDeps & RegisterChatRoutesDeps & RegisterDeployRoutesDeps & RegisterDeploymentCheckRoutesDeps & RegisterFinalizeRoutesDeps & RegisterImportRoutesDeps & RegisterLiveArtifactRoutesDeps & RegisterMcpRoutesDeps & RegisterMediaRoutesDeps & RegisterProjectArtifactRoutesDeps & RegisterProjectExportRoutesDeps & RegisterProjectFileRoutesDeps & RegisterProjectRoutesDeps & RegisterProjectUploadRoutesDeps & RegisterRoutineRoutesDeps & RegisterStaticResourceRoutesDeps;
+type Assert<T extends true> = T;
+type ServerContextCoversRouteDeps = Assert<ServerContext extends AllRegisteredRouteDeps ? true : false>;
+export declare function assertServerContextSatisfiesRoutes(ctx: ServerContextCoversRouteDeps extends true ? ServerContext : never): void;
+export {};

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/route-context-contract.js

@@ -0,0 +1,4 @@
+export function assertServerContextSatisfiesRoutes(ctx) {
+    void ctx;
+}
+//# sourceMappingURL=route-context-contract.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/route-context-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-context-contract.js","sourceRoot":"","sources":["../src/route-context-contract.ts"],"names":[],"mappings":"AAiCA,MAAM,UAAU,kCAAkC,CAAC,GAAsE;IACvH,KAAK,GAAG,CAAC;AACX,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/routine-routes.d.ts

@@ -0,0 +1,37 @@
+import type { Express } from 'express';
+import { type RoutineService } from './routines.js';
+import type { RouteDeps } from './server-context.js';
+export interface RegisterRoutineRoutesDeps extends RouteDeps<'db' | 'routines'> {
+}
+export type RoutineRoutesService = Pick<RoutineService, 'nextRunAt' | 'rescheduleOne' | 'runNow' | 'unschedule'>;
+export declare function routineDbRowToContract(row: any, latestRun: any): {
+    id: any;
+    name: any;
+    prompt: any;
+    schedule: any;
+    target: {
+        mode: string;
+        projectId: any;
+    } | {
+        mode: string;
+        projectId?: never;
+    };
+    skillId: any;
+    agentId: any;
+    enabled: boolean;
+    nextRunAt: number | null;
+    lastRun: {
+        summary?: any;
+        projectId: any;
+        conversationId: any;
+        agentRunId: any;
+        completedAt?: any;
+        runId: any;
+        status: any;
+        trigger: any;
+        startedAt: any;
+    } | null;
+    createdAt: any;
+    updatedAt: any;
+};
+export declare function registerRoutineRoutes(app: Express, ctx: RegisterRoutineRoutesDeps): void;