@zhixuan92/multi-model-agent 5.0.2 → 5.0.3

package/dist/http/project-registry.js

@@ -0,0 +1,130 @@
+import { createProjectContext } from '@zhixuan92/multi-model-agent-core';
+import { validateCwd } from './cwd-validator.js';
+export class ProjectRegistry {
+    map = new Map();
+    cap;
+    idleEvictionMs;
+    evictionIntervalMs;
+    evictionTimer = null;
+    onProjectCreated;
+    onProjectEvicted;
+    constructor(options) {
+        this.cap = options.cap;
+        this.idleEvictionMs = options.idleEvictionMs;
+        this.evictionIntervalMs = options.evictionIntervalMs;
+        this.onProjectCreated = options.onProjectCreated;
+        this.onProjectEvicted = options.onProjectEvicted;
+    }
+    startEvictionTimer() {
+        if (this.evictionTimer)
+            return;
+        this.evictionTimer = setInterval(() => this.evictIdle(), this.evictionIntervalMs);
+        this.evictionTimer.unref?.();
+    }
+    stopEvictionTimer() {
+        if (this.evictionTimer)
+            clearInterval(this.evictionTimer);
+        this.evictionTimer = null;
+    }
+    /** Synchronous lookup-or-create with cap enforcement. Increments pendingReservations on success. */
+    reserveProject(cwd) {
+        const v = validateCwd(cwd);
+        if (!v.ok)
+            return { ok: false, error: v.error, message: v.message };
+        const key = v.canonicalCwd;
+        const existing = this.map.get(key);
+        if (existing) {
+            existing.pendingReservations += 1;
+            existing.lastActivityAt = Date.now();
+            return { ok: true, projectContext: existing, created: false };
+        }
+        if (this.map.size >= this.cap) {
+            return { ok: false, error: 'project_cap', message: `server at ${this.cap} projects; close some connections and retry` };
+        }
+        const pc = createProjectContext(key);
+        pc.pendingReservations = 1;
+        this.map.set(key, pc);
+        this.onProjectCreated?.(key);
+        return { ok: true, projectContext: pc, created: true };
+    }
+    /**
+     * Called from onsessioninitialized. Decrements pendingReservations and registers the session.
+     * `canonicalCwd` MUST be the `.cwd` value returned from a prior `reserveProject` call.
+     */
+    attachSession(canonicalCwd, sessionId) {
+        const pc = this.map.get(canonicalCwd);
+        if (!pc)
+            throw new Error(`attachSession: no project for ${canonicalCwd} (did you pass the raw cwd instead of projectContext.cwd?)`);
+        pc.activeSessions.add(sessionId);
+        if (pc.pendingReservations > 0)
+            pc.pendingReservations -= 1;
+        pc.lastActivityAt = Date.now();
+    }
+    /** Detach a session. `canonicalCwd` must match `projectContext.cwd`. No-op if unknown. */
+    detachSession(canonicalCwd, sessionId) {
+        const pc = this.map.get(canonicalCwd);
+        if (!pc)
+            return;
+        pc.activeSessions.delete(sessionId);
+        pc.lastActivityAt = Date.now();
+    }
+    /** Called if attachSession never fires. `canonicalCwd` must match `projectContext.cwd`. */
+    cancelReservation(canonicalCwd) {
+        const pc = this.map.get(canonicalCwd);
+        if (!pc)
+            return;
+        if (pc.pendingReservations > 0)
+            pc.pendingReservations -= 1;
+        pc.lastActivityAt = Date.now();
+    }
+    /** Look up a project by its canonical cwd. */
+    get(canonicalCwd) {
+        return this.map.get(canonicalCwd);
+    }
+    get size() {
+        return this.map.size;
+    }
+    *entries() {
+        yield* this.map.entries();
+    }
+    /**
+     * Returns true if the project context is idle and eligible for eviction.
+     * Gates on: no active HTTP requests, no active batches in the registry,
+     * no active sessions, no pending reservations, and idle for at least idleTimeoutMs.
+     */
+    isIdleFor(pc, now, idleTimeoutMs, batchRegistry) {
+        return (pc.activeRequests === 0 &&
+            batchRegistry.countActiveForProject(pc.cwd) === 0 &&
+            pc.activeSessions.size === 0 &&
+            pc.pendingReservations === 0 &&
+            (now - pc.lastActivityAt) > idleTimeoutMs);
+    }
+    evictIdle(batchRegistry) {
+        const now = Date.now();
+        const victims = [];
+        for (const [cwd, pc] of this.map.entries()) {
+            if (pc.activeSessions.size === 0 &&
+                pc.activeRequests === 0 &&
+                pc.pendingReservations === 0 &&
+                (batchRegistry === undefined || batchRegistry.countActiveForProject(cwd) === 0) &&
+                now - pc.lastActivityAt > this.idleEvictionMs) {
+                victims.push(cwd);
+            }
+        }
+        for (const cwd of victims) {
+            const pc = this.map.get(cwd);
+            pc.contextBlocks.clear();
+            pc.batchCache.clear();
+            this.map.delete(cwd);
+            this.onProjectEvicted?.(cwd, now - pc.lastActivityAt);
+        }
+    }
+    clear() {
+        for (const pc of this.map.values()) {
+            pc.contextBlocks.clear();
+            pc.batchCache.clear();
+        }
+        this.map.clear();
+    }
+}
+//# sourceMappingURL=project-registry.js.map

package/dist/http/project-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-registry.js","sourceRoot":"","sources":["../../src/http/project-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAsC,MAAM,mCAAmC,CAAC;AAC7G,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAgBjD,MAAM,OAAO,eAAe;IACT,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxC,GAAG,CAAS;IACZ,cAAc,CAAS;IACvB,kBAAkB,CAAS;IACpC,aAAa,GAA0B,IAAI,CAAC;IACnC,gBAAgB,CAAyB;IACzC,gBAAgB,CAAyC;IAE1E,YAAY,OAA+B;QACzC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACrD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IACnD,CAAC;IAED,kBAAkB;QAChB,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClF,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB;QACf,IAAI,IAAI,CAAC,aAAa;YAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,oGAAoG;IACpG,cAAc,CAAC,GAAW;QACxB,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,mBAAmB,IAAI,CAAC,CAAC;YAClC,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,CAAC,GAAG,6CAA6C,EAAE,CAAC;QAC1H,CAAC;QACD,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,EAAE,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,YAAoB,EAAE,SAAiB;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,4DAA4D,CAAC,CAAC;QACpI,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,mBAAmB,GAAG,CAAC;YAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC5D,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAED,0FAA0F;IAC1F,aAAa,CAAC,YAAoB,EAAE,SAAiB;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAED,2FAA2F;IAC3F,iBAAiB,CAAC,YAAoB;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,EAAE,CAAC,mBAAmB,GAAG,CAAC;YAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC5D,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAED,8CAA8C;IAC9C,GAAG,CAAC,YAAoB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,CAAC,OAAO;QACN,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,EAAkB,EAAE,GAAW,EAAE,aAAqB,EAAE,aAA4B;QAC5F,OAAO,CACL,EAAE,CAAC,cAAc,KAAK,CAAC;YACvB,aAAa,CAAC,qBAAqB,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;YACjD,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;YAC5B,EAAE,CAAC,mBAAmB,KAAK,CAAC;YAC5B,CAAC,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,aAAa,CAC1C,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,aAA6B;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YAC3C,IACE,EAAE,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;gBAC5B,EAAE,CAAC,cAAc,KAAK,CAAC;gBACvB,EAAE,CAAC,mBAAmB,KAAK,CAAC;gBAC5B,CAAC,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC/E,GAAG,GAAG,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,EAC7C,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YAC9B,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,KAAK;QACH,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACnC,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;YACzB,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/http/request-observability.d.ts

@@ -0,0 +1,8 @@
+import type { EnvelopeBus } from '@zhixuan92/multi-model-agent-core/events/envelope-bus';
+import type { LogWriter } from '@zhixuan92/multi-model-agent-core/events/log-writer';
+export interface EmitRequestReceivedDeps {
+    bus: EnvelopeBus;
+    logWriter: LogWriter;
+}
+export declare function emitRequestReceived(deps: EmitRequestReceivedDeps, batchId: string, route: string, parsed: unknown): Promise<void>;
+//# sourceMappingURL=request-observability.d.ts.map

package/dist/http/request-observability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-observability.d.ts","sourceRoot":"","sources":["../../src/http/request-observability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACzF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qDAAqD,CAAC;AAErF,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,WAAW,CAAC;IACjB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,IAAI,CAAC,CAmBf"}

package/dist/http/request-observability.js

@@ -0,0 +1,20 @@
+export async function emitRequestReceived(deps, batchId, route, parsed) {
+    const json = JSON.stringify(parsed);
+    const bodyBytes = Buffer.byteLength(json, 'utf8');
+    const ts = new Date().toISOString();
+    // Emit batch_created plain entry
+    deps.bus.emitPlainEntry({ ts, kind: 'batch_created', fields: { batch_id: batchId, route } });
+    // Emit request_received plain entry
+    const inline = bodyBytes <= deps.logWriter.inlineBodyLimit();
+    const fields = { batch_id: batchId, route, body_bytes: bodyBytes };
+    if (inline) {
+        fields.body = json;
+    }
+    else {
+        const spilled = await deps.logWriter.spillRequestBody({ batchId, body: parsed });
+        fields.body_path = spilled.path;
+        fields.body_bytes = spilled.bytes;
+    }
+    deps.bus.emitPlainEntry({ ts, kind: 'request_received', fields });
+}
+//# sourceMappingURL=request-observability.js.map

package/dist/http/request-observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-observability.js","sourceRoot":"","sources":["../../src/http/request-observability.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA6B,EAC7B,OAAe,EACf,KAAa,EACb,MAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEpC,iCAAiC;IACjC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAE7F,oCAAoC;IACpC,MAAM,MAAM,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAqD,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACrH,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;QAChC,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC"}

package/dist/http/request-pipeline.d.ts

@@ -0,0 +1,16 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { ServerConfig } from '@zhixuan92/multi-model-agent-core';
+import { RouteDispatcher } from '@zhixuan92/multi-model-agent-core';
+import type { RawHandler } from './types.js';
+export declare function setDraining(d: boolean): void;
+export declare function isDraining(): boolean;
+export interface PipelineConfig {
+    loopbackOnlyPaths: ReadonlySet<string>;
+    authExemptPaths: ReadonlySet<string>;
+    cwdRequiredPaths: ReadonlySet<string>;
+    /** Routes that REQUIRE X-MMA-Main-Model header. Tool dispatches must
+     *  attribute to a main model so wire telemetry's main_model is never null. */
+    mainModelRequiredPaths: ReadonlySet<string>;
+}
+export declare function handleRequest(router: RouteDispatcher<RawHandler>, token: string, req: IncomingMessage, res: ServerResponse, cfg: ServerConfig, pipelineCfg: PipelineConfig): Promise<void>;
+//# sourceMappingURL=request-pipeline.d.ts.map

package/dist/http/request-pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-pipeline.d.ts","sourceRoot":"","sources":["../../src/http/request-pipeline.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAQpE,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,YAAY,CAAC;AAS7D,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAsB;AACnE,wBAAgB,UAAU,IAAI,OAAO,CAAyB;AAE9D,MAAM,WAAW,cAAc;IAC7B,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC;kFAC8E;IAC9E,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,EACnC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,YAAY,EACjB,WAAW,EAAE,cAAc,GAC1B,OAAO,CAAC,IAAI,CAAC,CAuJf"}

package/dist/http/request-pipeline.js

@@ -0,0 +1,144 @@
+import { sendError } from './errors.js';
+import { readBody } from './middleware/body-reader.js';
+import { decompressBody } from './middleware/decompress.js';
+import { validateAuthHeader } from './auth.js';
+import { validateCwd } from './cwd-validator.js';
+import { isLoopbackAddress, isAllowedHostHeader } from '@zhixuan92/multi-model-agent-core';
+import { resolveCallerIdentity } from './middleware/caller-identity.js';
+const BODY_METHODS = new Set(['POST', 'PUT', 'PATCH', 'DELETE']);
+// Daemon-wide draining flag — set true by the cleanupSignal handler when
+// SIGTERM/SIGINT fires. New dispatches refuse with 503 service_unavailable
+// while shutdown drains in-flight tasks. /health is allowed through so
+// operators can confirm the daemon is winding down.
+let drainingMode = false;
+export function setDraining(d) { drainingMode = d; }
+export function isDraining() { return drainingMode; }
+export async function handleRequest(router, token, req, res, cfg, pipelineCfg) {
+    const method = req.method ?? 'GET';
+    const rawUrl = req.url ?? '/';
+    // ── Step 0: draining check ────────────────────────────────────────────────
+    // Once SIGTERM/SIGINT fires and cleanupSignal calls setDraining(true), new
+    // dispatches refuse with 503 so in-flight tasks can drain cleanly. /health
+    // stays available so operators can confirm the daemon is winding down.
+    if (drainingMode && !rawUrl.startsWith('/health')) {
+        sendError(res, 503, 'service_unavailable', 'daemon is draining; retry after restart');
+        return;
+    }
+    // ── Step 1: Body size cap ──────────────────────────────────────────────────
+    let rawBody;
+    if (BODY_METHODS.has(method)) {
+        const result = await readBody(req, cfg.server.limits.maxBodyBytes);
+        if (!result.ok) {
+            res.writeHead(413, { 'content-type': 'application/json', 'connection': 'close' });
+            res.end(JSON.stringify({ error: { code: 'payload_too_large', message: `Request body exceeds the ${cfg.server.limits.maxBodyBytes}-byte limit` } }), () => { req.socket?.destroy(); });
+            return;
+        }
+        rawBody = result.body;
+    }
+    // ── Step 2: Route match ────────────────────────────────────────────────────
+    const match = router.match(method, rawUrl);
+    if (!match) {
+        const allowed = router.methodsFor(rawUrl);
+        if (allowed.length > 0) {
+            sendError(res, 405, 'method_not_allowed', `Method ${method} not allowed`, { allowed });
+        }
+        else {
+            sendError(res, 404, 'not_found', `Unknown path ${rawUrl.split('?')[0]}`);
+        }
+        return;
+    }
+    // ── Step 3: Loopback & rebinding guard ─────────────────────────────────────
+    const pathname = rawUrl.split('?')[0];
+    // (a) Host-header rebinding check — ALL routes. Defends against DNS rebinding:
+    // the connection is loopback (IP check passes) but the Host header is an
+    // attacker-controlled domain. Only literal loopback host forms are allowed.
+    if (!isAllowedHostHeader(req.headers.host)) {
+        sendError(res, 403, 'forbidden_host', 'Request Host header is not an allowed loopback host');
+        return;
+    }
+    // (b) IP-level loopback check — loopbackOnlyPaths only.
+    if (pipelineCfg.loopbackOnlyPaths.has(pathname)) {
+        const remoteAddr = req.socket?.remoteAddress;
+        if (!isLoopbackAddress(remoteAddr)) {
+            sendError(res, 403, 'loopback_only', 'This endpoint is only accessible from the loopback interface');
+            return;
+        }
+    }
+    // ── Step 4: Bearer auth ────────────────────────────────────────────────────
+    if (!pipelineCfg.authExemptPaths.has(pathname)) {
+        const header = req.headers['authorization'];
+        const authResult = validateAuthHeader(header, token);
+        if (!authResult.ok) {
+            sendError(res, 401, 'unauthorized', 'Valid Bearer token required');
+            return;
+        }
+    }
+    // ── Step 5: Decompress body ─────────────────────────────────────────────────
+    if (rawBody !== undefined && rawBody.length > 0) {
+        const enc = req.headers['content-encoding'];
+        if (enc !== undefined) {
+            const result = await decompressBody(rawBody, enc, {
+                maxDecompressedBytes: cfg.server.limits.maxBodyBytes,
+            });
+            if (!result.ok) {
+                sendError(res, result.statusCode, result.reason, result.message);
+                return;
+            }
+            rawBody = result.body;
+        }
+    }
+    // ── Step 6: JSON body parse ────────────────────────────────────────────────
+    let parsedBody;
+    if (rawBody !== undefined && rawBody.length > 0) {
+        try {
+            parsedBody = JSON.parse(rawBody.toString('utf8'));
+        }
+        catch {
+            sendError(res, 400, 'invalid_json', 'Request body is not valid JSON');
+            return;
+        }
+    }
+    // ── Step 7: cwd query param validation ─────────────────────────────────────
+    let cwdValue;
+    const urlObj = new URL(rawUrl, 'http://localhost');
+    const requiresCwd = pipelineCfg.cwdRequiredPaths.has(pathname) ||
+        pathname === '/context-blocks' ||
+        /^\/context-blocks\//.test(pathname);
+    if (requiresCwd) {
+        const cwdParam = urlObj.searchParams.get('cwd') ?? undefined;
+        const cwdResult = validateCwd(cwdParam);
+        if (!cwdResult.ok) {
+            const statusCode = cwdResult.error === 'forbidden_cwd' ? 403 : 400;
+            sendError(res, statusCode, cwdResult.error, cwdResult.message);
+            return;
+        }
+        cwdValue = cwdResult.canonicalCwd;
+    }
+    // ── Step 8: Caller identity from headers ────────────────────────────────────
+    const identity = resolveCallerIdentity(req);
+    if (pipelineCfg.mainModelRequiredPaths.has(pathname)) {
+        if (identity.callerClient === 'other') {
+            sendError(res, 400, 'client_required', 'X-MMA-Client header is required on tool routes. Set it to one of: claude-code, cursor, codex-cli, gemini-cli.');
+            return;
+        }
+        // Auto-detect was unreliable: the claude-agent-sdk used by our own
+        // claude-tier workers writes JSONL files into the same project slug,
+        // and the resolver would pick those up (e.g. haiku) as the "main"
+        // model. The header must come from the calling client.
+        if (!identity.mainModel) {
+            sendError(res, 400, 'main_model_required', 'X-MMA-Main-Model header is required on tool routes. Set it to the calling agent\'s model id (e.g. claude-opus-4-7, gpt-5.4).');
+            return;
+        }
+    }
+    // ── Step 9: Hand off to matched handler ────────────────────────────────────
+    const ctx = {
+        url: urlObj,
+        cwd: cwdValue,
+        body: parsedBody,
+        authed: !pipelineCfg.authExemptPaths.has(pathname),
+        callerClient: identity.callerClient,
+        mainModel: identity.mainModel,
+    };
+    await match.handler(req, res, match.params, ctx);
+}
+//# sourceMappingURL=request-pipeline.js.map

package/dist/http/request-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-pipeline.js","sourceRoot":"","sources":["../../src/http/request-pipeline.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAGxE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjE,yEAAyE;AACzE,2EAA2E;AAC3E,uEAAuE;AACvE,oDAAoD;AACpD,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,MAAM,UAAU,WAAW,CAAC,CAAU,IAAU,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC;AACnE,MAAM,UAAU,UAAU,KAAc,OAAO,YAAY,CAAC,CAAC,CAAC;AAW9D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAmC,EACnC,KAAa,EACb,GAAoB,EACpB,GAAmB,EACnB,GAAiB,EACjB,WAA2B;IAE3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;IAE9B,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,YAAY,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClD,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,EAAE,yCAAyC,CAAC,CAAC;QACtF,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,IAAI,OAA2B,CAAC;IAChC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YAClF,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,4BAA4B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,aAAa,EAAE,EAAE,CAAC,EAC1I,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CACjC,CAAC;YACF,OAAO;QACT,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IACxB,CAAC;IAED,8EAA8E;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,UAAU,MAAM,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO;IACT,CAAC;IAED,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACvC,+EAA+E;IAC/E,yEAAyE;IACzE,4EAA4E;IAC5E,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,gBAAgB,EAAE,qDAAqD,CAAC,CAAC;QAC7F,OAAO;IACT,CAAC;IACD,wDAAwD;IACxD,IAAI,WAAW,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7C,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,EAAE,8DAA8D,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,6BAA6B,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE;gBAChD,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY;aACrD,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,UAAmB,CAAC;IACxB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,QAA4B,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,WAAW,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC5D,QAAQ,KAAK,iBAAiB;QAC9B,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QAC7D,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACnE,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC;IACpC,CAAC;IAED,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,WAAW,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,QAAQ,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACtC,SAAS,CACP,GAAG,EACH,GAAG,EACH,iBAAiB,EACjB,+GAA+G,CAChH,CAAC;YACF,OAAO;QACT,CAAC;QACD,mEAAmE;QACnE,qEAAqE;QACrE,kEAAkE;QAClE,uDAAuD;QACvD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACxB,SAAS,CACP,GAAG,EACH,GAAG,EACH,qBAAqB,EACrB,8HAA8H,CAC/H,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,MAAM,GAAG,GAAmB;QAC1B,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClD,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;IAEF,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC"}

package/dist/http/server.d.ts

@@ -0,0 +1,17 @@
+import type { ServerConfig, BatchRegistry } from '@zhixuan92/multi-model-agent-core';
+import type { ProjectRegistry } from './project-registry.js';
+export declare const SERVER_VERSION: string;
+export interface RunningServer {
+    port: number;
+    /** The resolved address the server is bound to. Used by CLI to log the actual listen address. */
+    serverAddress: string | null;
+    stop(): Promise<void>;
+    /** Shared BatchRegistry — exposed for testing and introspection handlers. */
+    batchRegistry: BatchRegistry;
+    /** Shared ProjectRegistry — exposed for testing and introspection handlers. */
+    projectRegistry: ProjectRegistry;
+    /** Wall-clock ms when the server finished starting (Date.now()). Used for uptimeMs in /status. */
+    serverStartedAt: number;
+}
+export declare function startServer(config: ServerConfig, injectedManifestSync?: import('../skill-install/skill-manifest-sync.js').SkillManifestSync): Promise<RunningServer>;
+//# sourceMappingURL=server.d.ts.map

package/dist/http/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/http/server.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAWrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAiB7D,eAAO,MAAM,cAAc,QAAsB,CAAC;AAElD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,iGAAiG;IACjG,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,6EAA6E;IAC7E,aAAa,EAAE,aAAa,CAAC;IAC7B,+EAA+E;IAC/E,eAAe,EAAE,eAAe,CAAC;IACjC,kGAAkG;IAClG,eAAe,EAAE,MAAM,CAAC;CACzB;AAoND,wBAAsB,WAAW,CAC/B,MAAM,EAAE,YAAY,EACpB,oBAAoB,CAAC,EAAE,OAAO,yCAAyC,EAAE,iBAAiB,GACzF,OAAO,CAAC,aAAa,CAAC,CA+ExB"}