agentstudio 0.1.0

package/src/index.ts

@@ -0,0 +1,100 @@
+import express from 'express';
+import cors from 'cors';
+import helmet from 'helmet';
+import dotenv from 'dotenv';
+import path from 'path';
+import { fileURLToPath } from 'url';
+
+// Import routes
+import agentsRouter from './routes/agents.js';
+import authRouter from './routes/auth.js';
+import filesRouter from './routes/files.js';
+import mcpRouter from './routes/mcp.js';
+import mediaRouter from './routes/media.js';
+import slidesRouter from './routes/slides.js';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+// Load environment variables
+const envPath = process.env.ENV_PATH || '.env';
+dotenv.config({ path: envPath });
+
+const app = express();
+const PORT = process.env.PORT || 4936;
+const HOST = process.env.HOST || 'localhost';
+
+// Security middleware
+app.use(helmet({
+  crossOriginEmbedderPolicy: false,
+  contentSecurityPolicy: {
+    directives: {
+      defaultSrc: ["'self'"],
+      scriptSrc: ["'self'", "'unsafe-inline'"],
+      styleSrc: ["'self'", "'unsafe-inline'"],
+      imgSrc: ["'self'", "data:", "blob:"],
+      connectSrc: ["'self'", "ws:", "wss:"],
+    },
+  },
+}));
+
+// CORS configuration
+const corsOrigins = process.env.CORS_ORIGINS ?
+  process.env.CORS_ORIGINS.split(',').map(origin => origin.trim()) :
+  [
+    'http://localhost:3000',
+    'http://127.0.0.1:3000',
+    'https://*.vercel.app'
+  ];
+
+app.use(cors({
+  origin: corsOrigins,
+  credentials: true
+}));
+
+// Body parsing middleware
+app.use(express.json({ limit: '50mb' }));
+app.use(express.urlencoded({ extended: true, limit: '50mb' }));
+
+// Serve static files
+const frontendDistPath = path.join(__dirname, '../frontend/dist');
+app.use(express.static(frontendDistPath));
+
+// API routes
+app.use('/api/agents', agentsRouter);
+app.use('/api/auth', authRouter);
+app.use('/api/files', filesRouter);
+app.use('/api/mcp', mcpRouter);
+app.use('/api/media', mediaRouter);
+app.use('/api/slides', slidesRouter);
+
+// Health check endpoint
+app.get('/api/health', (req, res) => {
+  res.json({
+    status: 'ok',
+    timestamp: new Date().toISOString(),
+    version: '0.1.0'
+  });
+});
+
+// Serve frontend for all other routes (SPA routing)
+app.get('*', (req, res) => {
+  res.sendFile(path.join(frontendDistPath, 'index.html'));
+});
+
+export function startServer(): Promise<void> {
+  return new Promise((resolve) => {
+    const port = parseInt(process.env.PORT || PORT.toString());
+    const host = process.env.HOST || HOST;
+    const server = app.listen(port, host, () => {
+      console.log(`🚀 AgentStudio running on http://${host}:${port}`);
+      console.log('📖 Open your browser to start using AgentStudio');
+      resolve();
+    });
+  });
+}
+
+// Only start server if this file is run directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+  startServer().catch(console.error);
+}

package/src/middleware/auth.ts

@@ -0,0 +1,26 @@
+import { Request, Response, NextFunction } from 'express';
+import { verifyToken } from '../utils/jwt.js';
+
+/**
+ * Middleware to authenticate requests using JWT token
+ * Expects token in Authorization header as "Bearer <token>"
+ */
+export function authMiddleware(req: Request, res: Response, next: NextFunction): void {
+  const authHeader = req.headers.authorization;
+
+  if (!authHeader || !authHeader.startsWith('Bearer ')) {
+    res.status(401).json({ error: 'Unauthorized: No token provided' });
+    return;
+  }
+
+  const token = authHeader.substring(7); // Remove "Bearer " prefix
+  const payload = verifyToken(token);
+
+  if (!payload) {
+    res.status(401).json({ error: 'Unauthorized: Invalid or expired token' });
+    return;
+  }
+
+  // Token is valid, proceed to next middleware
+  next();
+}