@zhixuan92/multi-model-agent 3.0.0

package/dist/http/cwd-validator.js

@@ -0,0 +1,115 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+const SEP = path.sep;
+/**
+ * Walk each path component and check if any symlink points outside its
+ * containing parent directory (symlink escape). Returns true if a symlink
+ * escape is detected.
+ *
+ * Algorithm: build the path incrementally. At each component that is a symlink,
+ * canonicalize both the parent directory and the symlink's resolved target via
+ * realpathSync, then verify that the resolved target is a descendant of the
+ * canonical parent. This handles macOS-style double-indirection (e.g. /var →
+ * /private/var) without false positives.
+ */
+function hasSymlinkEscape(cwd) {
+    const parts = cwd.split(SEP).filter(Boolean); // ['a','b','c'] for /a/b/c
+    // We track the "logical" accumulated path (not yet canonicalized) so lstat
+    // finds the right inode even when earlier symlinks changed the real prefix.
+    // We will resolve it when we need to compare.
+    let logicalAccum = SEP;
+    for (const part of parts) {
+        const logicalCurrent = path.join(logicalAccum, part);
+        // Resolve logicalAccum to its canonical form so lstat finds the right path.
+        let canonAccum;
+        try {
+            canonAccum = fs.realpathSync(logicalAccum);
+        }
+        catch {
+            return false;
+        }
+        const canonCurrent = path.join(canonAccum, part);
+        let lstat;
+        try {
+            lstat = fs.lstatSync(canonCurrent);
+        }
+        catch {
+            // Path doesn't exist — validateCwd will catch this
+            return false;
+        }
+        if (lstat.isSymbolicLink()) {
+            let target;
+            try {
+                target = fs.readlinkSync(canonCurrent);
+            }
+            catch {
+                return false;
+            }
+            // Resolve target relative to the canonical parent directory of the symlink.
+            const resolvedTarget = path.isAbsolute(target)
+                ? target
+                : path.resolve(canonAccum, target);
+            // Canonicalize the resolved target and the parent dir for stable comparison.
+            let canonResolvedTarget;
+            try {
+                canonResolvedTarget = fs.realpathSync(resolvedTarget);
+            }
+            catch {
+                // Target doesn't exist — validateCwd will catch this
+                return false;
+            }
+            // The parent dir that should "contain" this symlink is canonAccum.
+            const parentWithSep = canonAccum.endsWith(SEP) ? canonAccum : canonAccum + SEP;
+            const resolvedWithSep = canonResolvedTarget.endsWith(SEP)
+                ? canonResolvedTarget
+                : canonResolvedTarget + SEP;
+            if (!resolvedWithSep.startsWith(parentWithSep)) {
+                // Symlink escapes its parent directory
+                return true;
+            }
+            logicalAccum = resolvedTarget;
+        }
+        else {
+            logicalAccum = logicalCurrent;
+        }
+    }
+    return false;
+}
+export function validateCwd(cwd) {
+    if (!cwd)
+        return { ok: false, error: 'missing_cwd', message: "required query param 'cwd' not provided" };
+    if (!path.isAbsolute(cwd))
+        return { ok: false, error: 'invalid_cwd', message: `cwd must be absolute: ${cwd}` };
+    let canonical;
+    try {
+        canonical = fs.realpathSync(cwd);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === 'ENOENT')
+            return { ok: false, error: 'cwd_not_dir', message: `cwd does not exist: ${cwd}` };
+        if (code === 'EACCES' || code === 'EPERM')
+            return { ok: false, error: 'cwd_not_dir', message: `cwd is not accessible (permission denied): ${cwd}` };
+        return { ok: false, error: 'cwd_not_dir', message: `cwd cannot be resolved (${code ?? 'unknown error'}): ${cwd}` };
+    }
+    let stat;
+    try {
+        stat = fs.statSync(canonical);
+    }
+    catch {
+        return { ok: false, error: 'cwd_not_dir', message: `cwd realpath is not accessible: ${cwd} → ${canonical}` };
+    }
+    if (!stat.isDirectory())
+        return { ok: false, error: 'cwd_not_dir', message: `cwd is not a directory: ${cwd}` };
+    // ── Symlink-escape check ──────────────────────────────────────────────────
+    // Detect symlinks whose target escapes the containing parent directory.
+    if (hasSymlinkEscape(cwd)) {
+        return {
+            ok: false,
+            error: 'forbidden_cwd',
+            message: `cwd contains a symlink that escapes its parent directory: ${cwd}`,
+        };
+    }
+    return { ok: true, canonicalCwd: canonical };
+}
+//# sourceMappingURL=cwd-validator.js.map

package/dist/http/cwd-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cwd-validator.js","sourceRoot":"","sources":["../../src/http/cwd-validator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;AAErB;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,YAAY,GAAW,GAAG,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACrD,4EAA4E;QAC5E,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEjD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;YAED,4EAA4E;YAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5C,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAErC,6EAA6E;YAC7E,IAAI,mBAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,mBAAmB,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,qDAAqD;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,mEAAmE;YACnE,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC;YAC/E,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACvD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,mBAAmB,GAAG,GAAG,CAAC;YAE9B,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/C,uCAAuC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,YAAY,GAAG,cAAc,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,cAAc,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACzG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,GAAG,EAAE,EAAE,CAAC;IAE/G,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC;QACzG,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,8CAA8C,GAAG,EAAE,EAAE,CAAC;QACpJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,IAAI,IAAI,eAAe,MAAM,GAAG,EAAE,EAAE,CAAC;IACrH,CAAC;IAED,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,GAAG,MAAM,SAAS,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC;IAE/G,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,6DAA6D,GAAG,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC"}

package/dist/http/errors.d.ts

@@ -0,0 +1,4 @@
+import type { ServerResponse } from 'node:http';
+export declare function sendError(res: ServerResponse, status: number, code: string, message: string, details?: unknown): void;
+export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
+//# sourceMappingURL=errors.d.ts.map

package/dist/http/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,wBAAgB,SAAS,CACvB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,GAChB,IAAI,CAGN;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGjF"}

package/dist/http/errors.js

@@ -0,0 +1,9 @@
+export function sendError(res, status, code, message, details) {
+    res.writeHead(status, { 'content-type': 'application/json' });
+    res.end(JSON.stringify({ error: { code, message, ...(details !== undefined ? { details } : {}) } }));
+}
+export function sendJson(res, status, body) {
+    res.writeHead(status, { 'content-type': 'application/json' });
+    res.end(JSON.stringify(body));
+}
+//# sourceMappingURL=errors.js.map

package/dist/http/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,SAAS,CACvB,GAAmB,EACnB,MAAc,EACd,IAAY,EACZ,OAAe,EACf,OAAiB;IAEjB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACzE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/http/execution-context.d.ts

@@ -0,0 +1,15 @@
+import type { ProjectContext } from '@zhixuan92/multi-model-agent-core';
+import type { ExecutionContext } from '@zhixuan92/multi-model-agent-core/executors/types';
+import type { HandlerDeps } from './handler-deps.js';
+/**
+ * Builds the ExecutionContext passed to every executor.
+ *
+ * awaitClarification wires to the BatchRegistry clarification flow:
+ * 1. Sets entry.resolveClarification BEFORE calling requestClarification
+ *    (order matters — requestClarification changes state; resolver must be
+ *    registered first so resumeFromClarification can call it later).
+ * 2. Returns a Promise that resolves when resumeFromClarification is called
+ *    by the POST /batch/:id/clarify handler (Phase 7).
+ */
+export declare function buildExecutionContext(deps: HandlerDeps, pc: ProjectContext, batchId: string): ExecutionContext;
+//# sourceMappingURL=execution-context.d.ts.map

package/dist/http/execution-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../src/http/execution-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAyB,MAAM,mDAAmD,CAAC;AACjH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,WAAW,EACjB,EAAE,EAAE,cAAc,EAClB,OAAO,EAAE,MAAM,GACd,gBAAgB,CAqBlB"}

package/dist/http/execution-context.js

@@ -0,0 +1,35 @@
+// packages/server/src/http/execution-context.ts
+import { createProvider } from '@zhixuan92/multi-model-agent-core';
+/**
+ * Builds the ExecutionContext passed to every executor.
+ *
+ * awaitClarification wires to the BatchRegistry clarification flow:
+ * 1. Sets entry.resolveClarification BEFORE calling requestClarification
+ *    (order matters — requestClarification changes state; resolver must be
+ *    registered first so resumeFromClarification can call it later).
+ * 2. Returns a Promise that resolves when resumeFromClarification is called
+ *    by the POST /batch/:id/clarify handler (Phase 7).
+ */
+export function buildExecutionContext(deps, pc, batchId) {
+    return {
+        projectContext: pc,
+        config: deps.config,
+        logger: deps.logger,
+        contextBlockStore: pc.contextBlocks,
+        providerFactory: (profile) => createProvider(profile, deps.config),
+        parentModel: process.env['PARENT_MODEL_NAME'],
+        onProgress: undefined,
+        awaitClarification: async (proposal) => {
+            return new Promise((resolve) => {
+                const entry = deps.batchRegistry.get(batchId);
+                if (entry) {
+                    // Register resolver BEFORE transitioning state so resumeFromClarification
+                    // can call it immediately if it races ahead.
+                    entry.resolveClarification = (interpretation) => resolve({ interpretation });
+                }
+                deps.batchRegistry.requestClarification(batchId, proposal.interpretation);
+            });
+        },
+    };
+}
+//# sourceMappingURL=execution-context.js.map

package/dist/http/execution-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../src/http/execution-context.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAKnE;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAiB,EACjB,EAAkB,EAClB,OAAe;IAEf,OAAO;QACL,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,iBAAiB,EAAE,EAAE,CAAC,aAAa;QACnC,eAAe,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,cAAc,CAAC,OAAiC,EAAE,IAAI,CAAC,MAAM,CAAC;QACpG,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC7C,UAAU,EAAE,SAAS;QACrB,kBAAkB,EAAE,KAAK,EAAE,QAA+B,EAAE,EAAE;YAC5D,OAAO,IAAI,OAAO,CAA6B,CAAC,OAAO,EAAE,EAAE;gBACzD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC9C,IAAI,KAAK,EAAE,CAAC;oBACV,0EAA0E;oBAC1E,6CAA6C;oBAC7C,KAAK,CAAC,oBAAoB,GAAG,CAAC,cAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YAC5E,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/http/handler-deps.d.ts

@@ -0,0 +1,16 @@
+import type { MultiModelConfig } from '@zhixuan92/multi-model-agent-core';
+import type { DiagnosticLogger } from '@zhixuan92/multi-model-agent-core';
+import type { ProjectRegistry } from './project-registry.js';
+import type { BatchRegistry } from '@zhixuan92/multi-model-agent-core';
+/**
+ * Dependencies injected into every handler factory at server startup.
+ * Built once; passed to buildDelegateHandler, buildAuditHandler, etc.
+ */
+export interface HandlerDeps {
+    /** Full multi-model config (agents + defaults). May be undefined in unit tests. */
+    config: MultiModelConfig;
+    logger: DiagnosticLogger;
+    projectRegistry: ProjectRegistry;
+    batchRegistry: BatchRegistry;
+}
+//# sourceMappingURL=handler-deps.d.ts.map

package/dist/http/handler-deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-deps.d.ts","sourceRoot":"","sources":["../../src/http/handler-deps.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,mFAAmF;IACnF,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B"}

package/dist/http/handler-deps.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=handler-deps.js.map

package/dist/http/handler-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler-deps.js","sourceRoot":"","sources":["../../src/http/handler-deps.ts"],"names":[],"mappings":""}

package/dist/http/handlers/control/batch.d.ts

@@ -0,0 +1,24 @@
+import type { RawHandler } from '../../router.js';
+import type { BatchRegistry } from '@zhixuan92/multi-model-agent-core';
+export interface BatchHandlerDeps {
+    batchRegistry: BatchRegistry;
+}
+/**
+ * GET /batch/:batchId — poll the current state of a batch.
+ * Optional ?taskIndex=N query param slices a single task result from a
+ * complete batch.
+ *
+ * State mapping:
+ *  pending              → 200 { state, startedAt }
+ *  awaiting_clarification → 200 { state, proposedInterpretation }
+ *  complete             → 200 { state, result } (or sliced if taskIndex given)
+ *  failed               → 200 { state, error }
+ *  expired              → 200 { state: 'expired' }
+ *
+ * Errors:
+ *  unknown batchId         → 404 not_found
+ *  non-numeric taskIndex   → 400 invalid_task_index
+ *  taskIndex ≥ results.len → 404 unknown_task_index
+ */
+export declare function buildBatchHandler(deps: BatchHandlerDeps): RawHandler;
+//# sourceMappingURL=batch.d.ts.map

package/dist/http/handlers/control/batch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../../../src/http/handlers/control/batch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,UAAU,CAiFpE"}

package/dist/http/handlers/control/batch.js

@@ -0,0 +1,81 @@
+import { sendError, sendJson } from '../../errors.js';
+/**
+ * GET /batch/:batchId — poll the current state of a batch.
+ * Optional ?taskIndex=N query param slices a single task result from a
+ * complete batch.
+ *
+ * State mapping:
+ *  pending              → 200 { state, startedAt }
+ *  awaiting_clarification → 200 { state, proposedInterpretation }
+ *  complete             → 200 { state, result } (or sliced if taskIndex given)
+ *  failed               → 200 { state, error }
+ *  expired              → 200 { state: 'expired' }
+ *
+ * Errors:
+ *  unknown batchId         → 404 not_found
+ *  non-numeric taskIndex   → 400 invalid_task_index
+ *  taskIndex ≥ results.len → 404 unknown_task_index
+ */
+export function buildBatchHandler(deps) {
+    return async (_req, res, params, ctx) => {
+        const { batchId } = params;
+        // ── 1. Lookup ──────────────────────────────────────────────────────────
+        const entry = deps.batchRegistry.get(batchId);
+        if (!entry) {
+            sendError(res, 404, 'not_found', `Batch ${batchId} not found`);
+            return;
+        }
+        // ── 2. Parse optional taskIndex ────────────────────────────────────────
+        const rawTaskIndex = ctx.url.searchParams.get('taskIndex');
+        let taskIndex = null;
+        if (rawTaskIndex !== null) {
+            if (!/^\d+$/.test(rawTaskIndex)) {
+                sendError(res, 400, 'invalid_task_index', `taskIndex must be a non-negative integer; got: ${JSON.stringify(rawTaskIndex)}`);
+                return;
+            }
+            taskIndex = parseInt(rawTaskIndex, 10);
+        }
+        // ── 3. State mapping ───────────────────────────────────────────────────
+        switch (entry.state) {
+            case 'pending':
+                sendJson(res, 200, { state: 'pending', startedAt: entry.startedAt });
+                return;
+            case 'awaiting_clarification':
+                sendJson(res, 200, {
+                    state: 'awaiting_clarification',
+                    proposedInterpretation: entry.proposedInterpretation,
+                });
+                return;
+            case 'complete': {
+                const fullResult = entry.result;
+                if (taskIndex !== null) {
+                    const results = fullResult?.results;
+                    if (!Array.isArray(results) || taskIndex >= results.length) {
+                        sendError(res, 404, 'unknown_task_index', `taskIndex ${taskIndex} is out of range (batch has ${Array.isArray(results) ? results.length : 0} result(s))`);
+                        return;
+                    }
+                    // Return the full result shape with only the sliced task
+                    sendJson(res, 200, {
+                        state: 'complete',
+                        result: { ...fullResult, results: [results[taskIndex]] },
+                    });
+                    return;
+                }
+                sendJson(res, 200, { state: 'complete', result: fullResult });
+                return;
+            }
+            case 'failed':
+                sendJson(res, 200, { state: 'failed', error: entry.error });
+                return;
+            case 'expired':
+                sendJson(res, 200, { state: 'expired' });
+                return;
+            default: {
+                // Exhaustiveness guard — should never happen
+                const _never = entry.state;
+                sendError(res, 500, 'internal_error', `Unexpected batch state: ${String(_never)}`);
+            }
+        }
+    };
+}
+//# sourceMappingURL=batch.js.map

package/dist/http/handlers/control/batch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"batch.js","sourceRoot":"","sources":["../../../../src/http/handlers/control/batch.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAQtD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACtD,OAAO,KAAK,EACV,IAAqB,EACrB,GAAmB,EACnB,MAA8B,EAC9B,GAAG,EACH,EAAE;QACF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAE3B,0EAA0E;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,OAAO,YAAY,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,YAAY,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,kDAAkD,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC5H,OAAO;YACT,CAAC;YACD,SAAS,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,0EAA0E;QAC1E,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,SAAS;gBACZ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBACrE,OAAO;YAET,KAAK,wBAAwB;gBAC3B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;oBACjB,KAAK,EAAE,wBAAwB;oBAC/B,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;iBACrD,CAAC,CAAC;gBACH,OAAO;YAET,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,MAAM,UAAU,GAAG,KAAK,CAAC,MAA6C,CAAC;gBAEvE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,CAAC;oBACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;wBAC3D,SAAS,CACP,GAAG,EACH,GAAG,EACH,oBAAoB,EACpB,aAAa,SAAS,+BAA+B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAC9G,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,yDAAyD;oBACzD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACjB,KAAK,EAAE,UAAU;wBACjB,MAAM,EAAE,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE;qBACzD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,KAAK,QAAQ;gBACX,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC5D,OAAO;YAET,KAAK,SAAS;gBACZ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBACzC,OAAO;YAET,OAAO,CAAC,CAAC,CAAC;gBACR,6CAA6C;gBAC7C,MAAM,MAAM,GAAU,KAAK,CAAC,KAAK,CAAC;gBAClC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,2BAA2B,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/handlers/control/clarifications.d.ts

@@ -0,0 +1,19 @@
+import type { RawHandler } from '../../router.js';
+import type { BatchRegistry } from '@zhixuan92/multi-model-agent-core';
+export interface ClarificationsHandlerDeps {
+    batchRegistry: BatchRegistry;
+}
+/**
+ * POST /clarifications/confirm — confirms (or idempotently re-confirms) an
+ * awaiting_clarification batch by providing the caller's chosen interpretation.
+ *
+ * Auth required; NOT cwd-gated (operates on a batchId, not a project cwd).
+ *
+ * Success → 200 { batchId, state: <current state after confirmation> }
+ * Errors:
+ *   invalid body   → 400 invalid_request
+ *   unknown batchId → 404 not_found
+ *   wrong state w/ different interpretation → 409 invalid_batch_state
+ */
+export declare function buildClarificationsHandler(deps: ClarificationsHandlerDeps): RawHandler;
+//# sourceMappingURL=clarifications.d.ts.map

package/dist/http/handlers/control/clarifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clarifications.d.ts","sourceRoot":"","sources":["../../../../src/http/handlers/control/clarifications.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,aAAa,CAAC;CAC9B;AAOD;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,yBAAyB,GAAG,UAAU,CA8CtF"}

package/dist/http/handlers/control/clarifications.js

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+import { InvalidBatchStateError } from '@zhixuan92/multi-model-agent-core';
+import { sendError, sendJson } from '../../errors.js';
+const confirmBodySchema = z.object({
+    batchId: z.string().uuid(),
+    interpretation: z.string().min(1),
+});
+/**
+ * POST /clarifications/confirm — confirms (or idempotently re-confirms) an
+ * awaiting_clarification batch by providing the caller's chosen interpretation.
+ *
+ * Auth required; NOT cwd-gated (operates on a batchId, not a project cwd).
+ *
+ * Success → 200 { batchId, state: <current state after confirmation> }
+ * Errors:
+ *   invalid body   → 400 invalid_request
+ *   unknown batchId → 404 not_found
+ *   wrong state w/ different interpretation → 409 invalid_batch_state
+ */
+export function buildClarificationsHandler(deps) {
+    return async (_req, res, _params, ctx) => {
+        // ── 1. Validate body ───────────────────────────────────────────────────
+        const parsed = confirmBodySchema.safeParse(ctx.body);
+        if (!parsed.success) {
+            sendError(res, 400, 'invalid_request', 'Request body validation failed', {
+                fieldErrors: parsed.error.flatten(),
+            });
+            return;
+        }
+        const { batchId, interpretation } = parsed.data;
+        // ── 2. Lookup ──────────────────────────────────────────────────────────
+        const entry = deps.batchRegistry.get(batchId);
+        if (!entry) {
+            sendError(res, 404, 'not_found', `Batch ${batchId} not found`);
+            return;
+        }
+        // ── 3. Resume (handles idempotency + state validation) ─────────────────
+        try {
+            deps.batchRegistry.resumeFromClarification(batchId, interpretation);
+        }
+        catch (err) {
+            if (err instanceof InvalidBatchStateError) {
+                sendError(res, 409, 'invalid_batch_state', `Cannot confirm clarification: batch is in state '${err.currentState}'`, {
+                    currentState: err.currentState,
+                });
+                return;
+            }
+            throw err;
+        }
+        // ── 4. Echo current state ──────────────────────────────────────────────
+        // Re-read the entry after resumeFromClarification — the batch may have
+        // already completed if the executor was waiting.
+        const updatedEntry = deps.batchRegistry.get(batchId);
+        const currentState = updatedEntry?.state ?? 'pending';
+        sendJson(res, 200, { batchId, state: currentState });
+    };
+}
+//# sourceMappingURL=clarifications.js.map

package/dist/http/handlers/control/clarifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clarifications.js","sourceRoot":"","sources":["../../../../src/http/handlers/control/clarifications.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAQtD,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAA+B;IACxE,OAAO,KAAK,EACV,IAAqB,EACrB,GAAmB,EACnB,OAA+B,EAC/B,GAAG,EACH,EAAE;QACF,0EAA0E;QAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,EAAE;gBACvE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAEhD,0EAA0E;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,OAAO,YAAY,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;gBAC1C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,EAAE,oDAAoD,GAAG,CAAC,YAAY,GAAG,EAAE;oBAClH,YAAY,EAAE,GAAG,CAAC,YAAY;iBAC/B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,0EAA0E;QAC1E,uEAAuE;QACvE,iDAAiD;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,YAAY,EAAE,KAAK,IAAI,SAAS,CAAC;QAEtD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/handlers/control/context-blocks.d.ts

@@ -0,0 +1,22 @@
+import type { RawHandler } from '../../router.js';
+import type { ProjectRegistry } from '../../project-registry.js';
+import type { ServerConfig } from '@zhixuan92/multi-model-agent-core';
+export interface ContextBlockHandlerDeps {
+    projectRegistry: ProjectRegistry;
+    config: ServerConfig;
+}
+export interface DeleteContextBlockHandlerDeps {
+    projectRegistry: ProjectRegistry;
+}
+/**
+ * POST /context-blocks — stores a new context block for the authenticated cwd.
+ * Requires cwd query param (cwd-gated).
+ */
+export declare function buildCreateContextBlockHandler(deps: ContextBlockHandlerDeps): RawHandler;
+/**
+ * DELETE /context-blocks/:blockId — removes a context block belonging to the
+ * authenticated cwd. Returns 404 if the block does not exist or belongs to
+ * a different project (isolation).
+ */
+export declare function buildDeleteContextBlockHandler(deps: DeleteContextBlockHandlerDeps): RawHandler;
+//# sourceMappingURL=context-blocks.d.ts.map

package/dist/http/handlers/control/context-blocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-blocks.d.ts","sourceRoot":"","sources":["../../../../src/http/handlers/control/context-blocks.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AAEtE,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,eAAe,CAAC;IACjC,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,eAAe,EAAE,eAAe,CAAC;CAClC;AAOD;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,uBAAuB,GAAG,UAAU,CA4DxF;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,6BAA6B,GAAG,UAAU,CA0C9F"}

package/dist/http/handlers/control/context-blocks.js

@@ -0,0 +1,88 @@
+import { z } from 'zod';
+import { sendError, sendJson } from '../../errors.js';
+const createBodySchema = z.object({
+    content: z.string().min(1),
+    ttlMs: z.number().int().positive().optional(),
+});
+/**
+ * POST /context-blocks — stores a new context block for the authenticated cwd.
+ * Requires cwd query param (cwd-gated).
+ */
+export function buildCreateContextBlockHandler(deps) {
+    return async (_req, res, _params, ctx) => {
+        const cwd = ctx.cwd;
+        // ── 1. Validate body ───────────────────────────────────────────────────
+        const parsed = createBodySchema.safeParse(ctx.body);
+        if (!parsed.success) {
+            sendError(res, 400, 'invalid_request', 'Request body validation failed', {
+                fieldErrors: parsed.error.flatten(),
+            });
+            return;
+        }
+        const { content } = parsed.data;
+        // ── 2. Content byte-size check ─────────────────────────────────────────
+        const byteLen = Buffer.byteLength(content, 'utf8');
+        const maxBytes = deps.config.server.limits.maxContextBlockBytes;
+        if (byteLen > maxBytes) {
+            sendError(res, 413, 'payload_too_large', `Context block content exceeds the ${maxBytes}-byte limit (got ${byteLen} bytes)`);
+            return;
+        }
+        // ── 3. Get project context ─────────────────────────────────────────────
+        const reserveResult = deps.projectRegistry.reserveProject(cwd);
+        if (!reserveResult.ok) {
+            sendError(res, 503, reserveResult.error, reserveResult.message);
+            return;
+        }
+        const pc = reserveResult.projectContext;
+        pc.lastActivityAt = Date.now();
+        deps.projectRegistry.cancelReservation(cwd);
+        // ── 4. Cap check ───────────────────────────────────────────────────────
+        const maxBlocks = deps.config.server.limits.maxContextBlocksPerProject;
+        if (pc.contextBlocks.size >= maxBlocks) {
+            sendError(res, 409, 'cap_exhausted', `Project context block cap of ${maxBlocks} reached; delete unused blocks before creating new ones`);
+            return;
+        }
+        // ── 5. Create block ────────────────────────────────────────────────────
+        const registered = pc.contextBlocks.register(content);
+        sendJson(res, 201, { id: registered.id });
+    };
+}
+/**
+ * DELETE /context-blocks/:blockId — removes a context block belonging to the
+ * authenticated cwd. Returns 404 if the block does not exist or belongs to
+ * a different project (isolation).
+ */
+export function buildDeleteContextBlockHandler(deps) {
+    return async (_req, res, params, ctx) => {
+        const cwd = ctx.cwd;
+        const { blockId } = params;
+        // ── 1. Get project context ─────────────────────────────────────────────
+        // Look up without reserving — we need to check if the project exists at all
+        const pc = deps.projectRegistry.get(cwd);
+        if (!pc) {
+            // Project doesn't exist — no blocks can belong to it
+            sendError(res, 404, 'not_found', `Context block ${blockId} not found`);
+            return;
+        }
+        // ── 2. Existence + isolation check ─────────────────────────────────────
+        // Since contextBlocks is per-project, any block in pc.contextBlocks belongs
+        // to this cwd. If the id isn't in this store, it either doesn't exist or
+        // belongs to a different project — both map to 404.
+        const content = pc.contextBlocks.get(blockId);
+        if (content === undefined) {
+            sendError(res, 404, 'not_found', `Context block ${blockId} not found`);
+            return;
+        }
+        // ── 3. Pin check ───────────────────────────────────────────────────────
+        const refcount = pc.contextBlocks.refcount(blockId);
+        if (refcount > 0) {
+            sendError(res, 409, 'pinned', `Context block ${blockId} is in use by ${refcount} active batch(es)`, { refcount });
+            return;
+        }
+        // ── 4. Delete ──────────────────────────────────────────────────────────
+        pc.contextBlocks.delete(blockId);
+        pc.lastActivityAt = Date.now();
+        sendJson(res, 200, { ok: true });
+    };
+}
+//# sourceMappingURL=context-blocks.js.map

package/dist/http/handlers/control/context-blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-blocks.js","sourceRoot":"","sources":["../../../../src/http/handlers/control/context-blocks.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AActD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAA6B;IAC1E,OAAO,KAAK,EACV,IAAqB,EACrB,GAAmB,EACnB,OAA+B,EAC/B,GAAG,EACH,EAAE;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAI,CAAC;QAErB,0EAA0E;QAC1E,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,EAAE;gBACvE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAEhC,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;QAChE,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;YACvB,SAAS,CACP,GAAG,EACH,GAAG,EACH,mBAAmB,EACnB,qCAAqC,QAAQ,oBAAoB,OAAO,SAAS,CAClF,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,aAAa,CAAC,cAAc,CAAC;QACxC,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAE5C,0EAA0E;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC;QACvE,IAAI,EAAE,CAAC,aAAa,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACvC,SAAS,CACP,GAAG,EACH,GAAG,EACH,eAAe,EACf,gCAAgC,SAAS,yDAAyD,CACnG,CAAC;YACF,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,UAAU,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEtD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAAmC;IAChF,OAAO,KAAK,EACV,IAAqB,EACrB,GAAmB,EACnB,MAA8B,EAC9B,GAAG,EACH,EAAE;QACF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAI,CAAC;QACrB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAE3B,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,qDAAqD;YACrD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,OAAO,YAAY,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,oDAAoD;QACpD,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,iBAAiB,OAAO,YAAY,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,iBAAiB,OAAO,iBAAiB,QAAQ,mBAAmB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClH,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/handlers/introspection/health.d.ts

@@ -0,0 +1,13 @@
+import type { RawHandler } from '../../router.js';
+/**
+ * GET /health — lightweight liveness probe.
+ *
+ * This is the only unauthenticated route. It intentionally returns only
+ * `{ ok: true }` — no counters, no project data. Richer operator data
+ * lives on GET /status.
+ *
+ * Loopback guard is applied by the server pipeline before the handler
+ * is invoked (see LOOPBACK_ONLY_PATHS in server.ts).
+ */
+export declare function buildHealthHandler(): RawHandler;
+//# sourceMappingURL=health.d.ts.map

package/dist/http/handlers/introspection/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../src/http/handlers/introspection/health.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,UAAU,CAI/C"}

package/dist/http/handlers/introspection/health.js

@@ -0,0 +1,17 @@
+import { sendJson } from '../../errors.js';
+/**
+ * GET /health — lightweight liveness probe.
+ *
+ * This is the only unauthenticated route. It intentionally returns only
+ * `{ ok: true }` — no counters, no project data. Richer operator data
+ * lives on GET /status.
+ *
+ * Loopback guard is applied by the server pipeline before the handler
+ * is invoked (see LOOPBACK_ONLY_PATHS in server.ts).
+ */
+export function buildHealthHandler() {
+    return (_req, res) => {
+        sendJson(res, 200, { ok: true });
+    };
+}
+//# sourceMappingURL=health.js.map

package/dist/http/handlers/introspection/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../../../src/http/handlers/introspection/health.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3C;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,IAAqB,EAAE,GAAmB,EAAE,EAAE;QACpD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC"}