agent-relay 1.0.21 → 1.1.0

package/dist/cloud/api/daemons.js

@@ -0,0 +1,320 @@
+/**
+ * Linked Daemons API Routes
+ *
+ * Allows local agent-relay instances to register and link with cloud.
+ * This enables:
+ * - Credential sync from cloud to local
+ * - Remote monitoring of local agents
+ * - Cross-machine agent discovery
+ * - Centralized dashboard for all instances
+ */
+import { Router } from 'express';
+import { randomBytes, createHash } from 'crypto';
+import { requireAuth } from './auth.js';
+import { db } from '../db/index.js';
+import { vault } from '../vault/index.js';
+export const daemonsRouter = Router();
+/**
+ * Generate a secure API key
+ */
+function generateApiKey() {
+    // Format: ar_live_<32 random bytes as hex>
+    const random = randomBytes(32).toString('hex');
+    return `ar_live_${random}`;
+}
+/**
+ * Hash an API key for storage
+ */
+function hashApiKey(apiKey) {
+    return createHash('sha256').update(apiKey).digest('hex');
+}
+/**
+ * POST /api/daemons/link
+ * Register a local daemon with the cloud (requires browser auth first)
+ *
+ * Flow:
+ * 1. User runs `agent-relay cloud link` in terminal
+ * 2. CLI opens browser to /cloud/link?code=<temp_code>
+ * 3. User authenticates (or is already logged in)
+ * 4. Browser shows confirmation, user clicks "Link"
+ * 5. Server generates API key and returns to CLI via the temp code
+ */
+daemonsRouter.post('/link', requireAuth, async (req, res) => {
+    const userId = req.session.userId;
+    const { name, machineId, metadata } = req.body;
+    if (!machineId || typeof machineId !== 'string') {
+        return res.status(400).json({ error: 'machineId is required' });
+    }
+    try {
+        // Check if this machine is already linked
+        const existing = await db.linkedDaemons.findByMachineId(userId, machineId);
+        if (existing) {
+            // Regenerate API key for existing link
+            const apiKey = generateApiKey();
+            const apiKeyHash = hashApiKey(apiKey);
+            await db.linkedDaemons.update(existing.id, {
+                name: name || existing.name,
+                apiKeyHash,
+                metadata: metadata || existing.metadata,
+                status: 'online',
+                lastSeenAt: new Date(),
+            });
+            return res.json({
+                success: true,
+                daemonId: existing.id,
+                apiKey, // Only returned once!
+                message: 'Daemon re-linked with new API key',
+            });
+        }
+        // Create new linked daemon
+        const apiKey = generateApiKey();
+        const apiKeyHash = hashApiKey(apiKey);
+        const daemon = await db.linkedDaemons.create({
+            userId,
+            name: name || `Daemon on ${machineId.substring(0, 8)}`,
+            machineId,
+            apiKeyHash,
+            status: 'online',
+            metadata: metadata || {},
+        });
+        res.status(201).json({
+            success: true,
+            daemonId: daemon.id,
+            apiKey, // Only returned once - user must save this!
+            message: 'Daemon linked successfully. Save your API key - it cannot be retrieved later.',
+        });
+    }
+    catch (error) {
+        console.error('Error linking daemon:', error);
+        res.status(500).json({ error: 'Failed to link daemon' });
+    }
+});
+/**
+ * GET /api/daemons
+ * List user's linked daemons
+ */
+daemonsRouter.get('/', requireAuth, async (req, res) => {
+    const userId = req.session.userId;
+    try {
+        const daemons = await db.linkedDaemons.findByUserId(userId);
+        res.json({
+            daemons: daemons.map((d) => ({
+                id: d.id,
+                name: d.name,
+                machineId: d.machineId,
+                status: d.status,
+                lastSeenAt: d.lastSeenAt,
+                metadata: d.metadata,
+                createdAt: d.createdAt,
+            })),
+        });
+    }
+    catch (error) {
+        console.error('Error listing daemons:', error);
+        res.status(500).json({ error: 'Failed to list daemons' });
+    }
+});
+/**
+ * DELETE /api/daemons/:id
+ * Unlink a daemon
+ */
+daemonsRouter.delete('/:id', requireAuth, async (req, res) => {
+    const userId = req.session.userId;
+    const { id } = req.params;
+    try {
+        const daemon = await db.linkedDaemons.findById(id);
+        if (!daemon) {
+            return res.status(404).json({ error: 'Daemon not found' });
+        }
+        if (daemon.userId !== userId) {
+            return res.status(403).json({ error: 'Unauthorized' });
+        }
+        await db.linkedDaemons.delete(id);
+        res.json({ success: true, message: 'Daemon unlinked' });
+    }
+    catch (error) {
+        console.error('Error unlinking daemon:', error);
+        res.status(500).json({ error: 'Failed to unlink daemon' });
+    }
+});
+// ============================================================================
+// Daemon API (authenticated with API key, not session)
+// These endpoints are called by local daemons, not browsers
+// ============================================================================
+/**
+ * Middleware to authenticate daemon by API key
+ */
+async function requireDaemonAuth(req, res, next) {
+    const authHeader = req.headers.authorization;
+    if (!authHeader || !authHeader.startsWith('Bearer ar_live_')) {
+        res.status(401).json({ error: 'Invalid API key format' });
+        return;
+    }
+    const apiKey = authHeader.replace('Bearer ', '');
+    const apiKeyHash = hashApiKey(apiKey);
+    try {
+        const daemon = await db.linkedDaemons.findByApiKeyHash(apiKeyHash);
+        if (!daemon) {
+            res.status(401).json({ error: 'Invalid API key' });
+            return;
+        }
+        // Update last seen
+        await db.linkedDaemons.updateLastSeen(daemon.id);
+        // Attach daemon info to request
+        req.daemon = daemon;
+        next();
+    }
+    catch (error) {
+        console.error('Daemon auth error:', error);
+        res.status(500).json({ error: 'Authentication failed' });
+    }
+}
+/**
+ * POST /api/daemons/heartbeat
+ * Daemon heartbeat - reports status and gets any pending commands
+ */
+daemonsRouter.post('/heartbeat', requireDaemonAuth, async (req, res) => {
+    const daemon = req.daemon;
+    const { agents, metrics } = req.body;
+    try {
+        // Update daemon status with agent info
+        await db.linkedDaemons.update(daemon.id, {
+            status: 'online',
+            metadata: {
+                ...daemon.metadata,
+                agents: agents || [],
+                metrics: metrics || {},
+                lastHeartbeat: new Date().toISOString(),
+            },
+        });
+        // Check for any pending commands (credential updates, etc.)
+        const pendingUpdates = await db.linkedDaemons.getPendingUpdates(daemon.id);
+        res.json({
+            success: true,
+            commands: pendingUpdates,
+        });
+    }
+    catch (error) {
+        console.error('Error processing heartbeat:', error);
+        res.status(500).json({ error: 'Failed to process heartbeat' });
+    }
+});
+/**
+ * GET /api/daemons/credentials
+ * Get credentials for the daemon's user (syncs cloud credentials to local)
+ */
+daemonsRouter.get('/credentials', requireDaemonAuth, async (req, res) => {
+    const daemon = req.daemon;
+    try {
+        // Get all decrypted credentials for the user via vault
+        const credentialsMap = await vault.getUserCredentials(daemon.userId);
+        // Convert Map to array format for API response
+        const credentials = Array.from(credentialsMap.entries()).map(([provider, cred]) => ({
+            provider,
+            accessToken: cred.accessToken,
+            tokenType: 'bearer',
+            expiresAt: cred.tokenExpiresAt,
+        }));
+        res.json({ credentials });
+    }
+    catch (error) {
+        console.error('Error fetching credentials:', error);
+        res.status(500).json({ error: 'Failed to fetch credentials' });
+    }
+});
+/**
+ * POST /api/daemons/agents
+ * Report agent list to cloud (for cross-machine discovery)
+ */
+daemonsRouter.post('/agents', requireDaemonAuth, async (req, res) => {
+    const daemon = req.daemon;
+    const { agents } = req.body;
+    if (!agents || !Array.isArray(agents)) {
+        return res.status(400).json({ error: 'agents array is required' });
+    }
+    try {
+        // Store agent list in daemon metadata
+        await db.linkedDaemons.update(daemon.id, {
+            metadata: {
+                ...daemon.metadata,
+                agents,
+                lastAgentSync: new Date().toISOString(),
+            },
+        });
+        // Get agents from all linked daemons for this user (cross-machine discovery)
+        const allDaemons = await db.linkedDaemons.findByUserId(daemon.userId);
+        const allAgents = allDaemons.flatMap((d) => {
+            const metadata = d.metadata;
+            const dAgents = metadata?.agents || [];
+            return dAgents.map((a) => ({
+                ...a,
+                daemonId: d.id,
+                daemonName: d.name,
+                machineId: d.machineId,
+            }));
+        });
+        res.json({
+            success: true,
+            allAgents, // Return all agents across all linked daemons
+        });
+    }
+    catch (error) {
+        console.error('Error syncing agents:', error);
+        res.status(500).json({ error: 'Failed to sync agents' });
+    }
+});
+/**
+ * POST /api/daemons/message
+ * Send message to an agent on another machine (cross-machine relay)
+ */
+daemonsRouter.post('/message', requireDaemonAuth, async (req, res) => {
+    const daemon = req.daemon;
+    const { targetDaemonId, targetAgent, message } = req.body;
+    if (!targetDaemonId || !targetAgent || !message) {
+        return res.status(400).json({ error: 'targetDaemonId, targetAgent, and message are required' });
+    }
+    try {
+        // Verify target daemon belongs to same user
+        const targetDaemon = await db.linkedDaemons.findById(targetDaemonId);
+        if (!targetDaemon || targetDaemon.userId !== daemon.userId) {
+            return res.status(404).json({ error: 'Target daemon not found' });
+        }
+        // Queue message for delivery
+        await db.linkedDaemons.queueMessage(targetDaemonId, {
+            from: {
+                daemonId: daemon.id,
+                daemonName: daemon.name,
+                agent: message.from,
+            },
+            to: targetAgent,
+            content: message.content,
+            metadata: message.metadata,
+            timestamp: new Date().toISOString(),
+        });
+        res.json({ success: true, message: 'Message queued for delivery' });
+    }
+    catch (error) {
+        console.error('Error sending cross-machine message:', error);
+        res.status(500).json({ error: 'Failed to send message' });
+    }
+});
+/**
+ * GET /api/daemons/messages
+ * Get pending messages for this daemon (cross-machine messages)
+ */
+daemonsRouter.get('/messages', requireDaemonAuth, async (req, res) => {
+    const daemon = req.daemon;
+    try {
+        const messages = await db.linkedDaemons.getQueuedMessages(daemon.id);
+        // Clear the queue after fetching
+        if (messages.length > 0) {
+            await db.linkedDaemons.clearMessageQueue(daemon.id);
+        }
+        res.json({ messages });
+    }
+    catch (error) {
+        console.error('Error fetching messages:', error);
+        res.status(500).json({ error: 'Failed to fetch messages' });
+    }
+});
+//# sourceMappingURL=daemons.js.map

package/dist/cloud/api/daemons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemons.js","sourceRoot":"","sources":["../../../src/cloud/api/daemons.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC;AAEtC;;GAEG;AACH,SAAS,cAAc;IACrB,2CAA2C;IAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,WAAW,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;GAUG;AACH,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAE/C,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACH,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAE3E,IAAI,QAAQ,EAAE,CAAC;YACb,uCAAuC;YACvC,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YAEtC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACzC,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,IAAI;gBAC3B,UAAU;gBACV,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ;gBACvC,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,IAAI,IAAI,EAAE;aACvB,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC,IAAI,CAAC;gBACd,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,QAAQ,CAAC,EAAE;gBACrB,MAAM,EAAE,sBAAsB;gBAC9B,OAAO,EAAE,mCAAmC;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,2BAA2B;QAC3B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC;YAC3C,MAAM;YACN,IAAI,EAAE,IAAI,IAAI,aAAa,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACtD,SAAS;YACT,UAAU;YACV,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,QAAQ,IAAI,EAAE;SACzB,CAAC,CAAC;QAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,4CAA4C;YACpD,OAAO,EAAE,+EAA+E;SACzF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACxE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE5D,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;QAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC;IACnC,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAElC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAC/E,uDAAuD;AACvD,4DAA4D;AAC5D,+EAA+E;AAE/E;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,GAAY,EACZ,GAAa,EACb,IAAgB;IAEhB,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IAE7C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC1D,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAEnE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,mBAAmB;QACnB,MAAM,EAAE,CAAC,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAEjD,gCAAgC;QAC/B,GAAW,CAAC,MAAM,GAAG,MAAM,CAAC;QAC7B,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;QAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC/F,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAErC,IAAI,CAAC;QACH,uCAAuC;QACvC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YACvC,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE;gBACR,GAAG,MAAM,CAAC,QAAQ;gBAClB,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,OAAO,EAAE,OAAO,IAAI,EAAE;gBACtB,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACxC;SACF,CAAC,CAAC;QAEH,4DAA4D;QAC5D,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE3E,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,aAAa,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAChG,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,CAAC;IAEnC,IAAI,CAAC;QACH,uDAAuD;QACvD,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAErE,+CAA+C;QAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAClF,QAAQ;YACR,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,CAAC,cAAc;SAC/B,CAAC,CAAC,CAAC;QAEJ,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC5F,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAE5B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,CAAC;QACH,sCAAsC;QACtC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;YACvC,QAAQ,EAAE;gBACR,GAAG,MAAM,CAAC,QAAQ;gBAClB,MAAM;gBACN,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACxC;SACF,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAA0C,CAAC;YAC9D,MAAM,OAAO,GAAI,QAAQ,EAAE,MAAkD,IAAI,EAAE,CAAC;YACpF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzB,GAAG,CAAC;gBACJ,QAAQ,EAAE,CAAC,CAAC,EAAE;gBACd,UAAU,EAAE,CAAC,CAAC,IAAI;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,8CAA8C;SAC1D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7F,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;IAE1D,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uDAAuD,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,CAAC;QACH,4CAA4C;QAC5C,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAErE,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,6BAA6B;QAC7B,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,cAAc,EAAE;YAClD,IAAI,EAAE;gBACJ,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,KAAK,EAAE,OAAO,CAAC,IAAI;aACpB;YACD,EAAE,EAAE,WAAW;YACf,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IAC7F,MAAM,MAAM,GAAI,GAAW,CAAC,MAAM,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAErE,iCAAiC;QACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/cloud/api/middleware/planLimits.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Plan Limits Middleware
+ *
+ * Express middleware to enforce plan-based resource limits.
+ */
+import { Request, Response, NextFunction } from 'express';
+/**
+ * Middleware to check workspace creation limit
+ *
+ * Use this middleware on workspace creation endpoints.
+ * Requires userId in session (use after requireAuth).
+ */
+export declare function checkWorkspaceLimit(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * Middleware to check repository limit
+ *
+ * Use this middleware on repo connection endpoints.
+ * Requires userId in session (use after requireAuth).
+ */
+export declare function checkRepoLimit(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * Middleware to check concurrent agent limit
+ *
+ * Use this middleware on agent spawn endpoints.
+ * Requires userId in session (use after requireAuth).
+ * Optionally pass currentRunningAgents in request body for accurate count.
+ */
+export declare function checkAgentLimit(req: Request, res: Response, next: NextFunction): Promise<void>;
+/**
+ * Middleware to check coordinator access
+ *
+ * Use this middleware on coordinator-related endpoints.
+ * Coordinators are only available on Pro plan and above.
+ */
+export declare function checkCoordinatorAccess(req: Request, res: Response, next: NextFunction): Promise<void>;
+//# sourceMappingURL=planLimits.d.ts.map

package/dist/cloud/api/middleware/planLimits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planLimits.d.ts","sourceRoot":"","sources":["../../../../src/cloud/api/middleware/planLimits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AA2B1D;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAoCf;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAqCf;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,IAAI,CAAC,CAmCf"}

package/dist/cloud/api/middleware/planLimits.js

@@ -0,0 +1,164 @@
+/**
+ * Plan Limits Middleware
+ *
+ * Express middleware to enforce plan-based resource limits.
+ */
+import { canCreateWorkspace, canAddRepo, canSpawnAgent, canUseCoordinator, } from '../../services/planLimits.js';
+/**
+ * Middleware to check workspace creation limit
+ *
+ * Use this middleware on workspace creation endpoints.
+ * Requires userId in session (use after requireAuth).
+ */
+export async function checkWorkspaceLimit(req, res, next) {
+    const userId = req.session.userId;
+    if (!userId) {
+        res.status(401).json({ error: 'Authentication required' });
+        return;
+    }
+    try {
+        const check = await canCreateWorkspace(userId);
+        if (!check.allowed) {
+            const response = {
+                error: check.reason || 'Workspace limit exceeded',
+                code: 'PLAN_LIMIT_EXCEEDED',
+                details: {
+                    plan: 'current',
+                    resource: 'workspaces',
+                    limit: check.limit || 0,
+                    current: check.current || 0,
+                },
+                upgrade: {
+                    message: 'Upgrade your plan to create more workspaces',
+                    url: '/settings/billing',
+                },
+            };
+            res.status(402).json(response);
+            return;
+        }
+        next();
+    }
+    catch (error) {
+        console.error('Error checking workspace limit:', error);
+        res.status(500).json({ error: 'Failed to check workspace limit' });
+    }
+}
+/**
+ * Middleware to check repository limit
+ *
+ * Use this middleware on repo connection endpoints.
+ * Requires userId in session (use after requireAuth).
+ */
+export async function checkRepoLimit(req, res, next) {
+    const userId = req.session.userId;
+    if (!userId) {
+        res.status(401).json({ error: 'Authentication required' });
+        return;
+    }
+    try {
+        const check = await canAddRepo(userId);
+        if (!check.allowed) {
+            const response = {
+                error: check.reason || 'Repository limit exceeded',
+                code: 'PLAN_LIMIT_EXCEEDED',
+                details: {
+                    plan: 'current',
+                    resource: 'repos',
+                    limit: check.limit || 0,
+                    current: check.current || 0,
+                },
+                upgrade: {
+                    message: 'Upgrade your plan to connect more repositories',
+                    url: '/settings/billing',
+                },
+            };
+            res.status(402).json(response);
+            return;
+        }
+        next();
+    }
+    catch (error) {
+        console.error('Error checking repo limit:', error);
+        res.status(500).json({ error: 'Failed to check repository limit' });
+    }
+}
+/**
+ * Middleware to check concurrent agent limit
+ *
+ * Use this middleware on agent spawn endpoints.
+ * Requires userId in session (use after requireAuth).
+ * Optionally pass currentRunningAgents in request body for accurate count.
+ */
+export async function checkAgentLimit(req, res, next) {
+    const userId = req.session.userId;
+    const currentRunningAgents = req.body.currentRunningAgents;
+    if (!userId) {
+        res.status(401).json({ error: 'Authentication required' });
+        return;
+    }
+    try {
+        const check = await canSpawnAgent(userId, currentRunningAgents);
+        if (!check.allowed) {
+            const response = {
+                error: check.reason || 'Concurrent agent limit exceeded',
+                code: 'PLAN_LIMIT_EXCEEDED',
+                details: {
+                    plan: 'current',
+                    resource: 'concurrentAgents',
+                    limit: check.limit || 0,
+                    current: check.current || 0,
+                },
+                upgrade: {
+                    message: 'Upgrade your plan to run more concurrent agents',
+                    url: '/settings/billing',
+                },
+            };
+            res.status(402).json(response);
+            return;
+        }
+        next();
+    }
+    catch (error) {
+        console.error('Error checking agent limit:', error);
+        res.status(500).json({ error: 'Failed to check agent limit' });
+    }
+}
+/**
+ * Middleware to check coordinator access
+ *
+ * Use this middleware on coordinator-related endpoints.
+ * Coordinators are only available on Pro plan and above.
+ */
+export async function checkCoordinatorAccess(req, res, next) {
+    const userId = req.session.userId;
+    if (!userId) {
+        res.status(401).json({ error: 'Authentication required' });
+        return;
+    }
+    try {
+        const check = await canUseCoordinator(userId);
+        if (!check.allowed) {
+            const response = {
+                error: check.reason || 'Coordinator agents not available',
+                code: 'FEATURE_NOT_AVAILABLE',
+                details: {
+                    plan: 'current',
+                    resource: 'coordinators',
+                    requiredPlan: check.requiredPlan,
+                },
+                upgrade: {
+                    message: 'Upgrade to Pro to use coordinator agents',
+                    url: '/settings/billing',
+                },
+            };
+            res.status(402).json(response);
+            return;
+        }
+        next();
+    }
+    catch (error) {
+        console.error('Error checking coordinator access:', error);
+        res.status(500).json({ error: 'Failed to check coordinator access' });
+    }
+}
+//# sourceMappingURL=planLimits.js.map

package/dist/cloud/api/middleware/planLimits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planLimits.js","sourceRoot":"","sources":["../../../../src/cloud/api/middleware/planLimits.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAqBtC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE/C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAmB;gBAC/B,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,0BAA0B;gBACjD,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,YAAY;oBACtB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;oBACvB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;iBAC5B;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,6CAA6C;oBACtD,GAAG,EAAE,mBAAmB;iBACzB;aACF,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;QACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QAEvC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAmB;gBAC/B,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,2BAA2B;gBAClD,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;oBACvB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;iBAC5B;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,gDAAgD;oBACzD,GAAG,EAAE,mBAAmB;iBACzB;aACF,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,MAAM,oBAAoB,GAAG,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAE3D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAEhE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAmB;gBAC/B,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,iCAAiC;gBACxD,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,kBAAkB;oBAC5B,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;oBACvB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC;iBAC5B;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,iDAAiD;oBAC1D,GAAG,EAAE,mBAAmB;iBACzB;aACF,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAY,EACZ,GAAa,EACb,IAAkB;IAElB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAmB;gBAC/B,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,kCAAkC;gBACzD,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE;oBACP,IAAI,EAAE,SAAS;oBACf,QAAQ,EAAE,cAAc;oBACxB,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC;gBACD,OAAO,EAAE;oBACP,OAAO,EAAE,0CAA0C;oBACnD,GAAG,EAAE,mBAAmB;iBACzB;aACF,CAAC;YAEF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC"}

package/dist/cloud/api/onboarding.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Onboarding API Routes
+ *
+ * Handles CLI proxy authentication for Claude Code and other providers.
+ * Spawns CLI tools to get auth URLs, captures tokens.
+ */
+export declare const onboardingRouter: import("express-serve-static-core").Router;
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/cloud/api/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../../src/cloud/api/onboarding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,eAAO,MAAM,gBAAgB,4CAAW,CAAC"}