aweshare 0.2.0 → 0.2.2

package/README.md

@@ -46,7 +46,7 @@ Consumer (standard SDK, zero changes)         Producer side
 
 ## Quickstart
 
-Published as [`aweshare`](https://www.npmjs.com/package/aweshare) on npm (requires Node ≥ 22) and as a Docker image (`ghcr.io/mugpeng/aweshare`). No clone needed.
+Published as [`aweshare`](https://www.npmjs.com/package/aweshare) on npm (requires Node ≥ 22) and as a Docker image (`ghcr.io/wehuman01/aweshare`). No clone needed.
 
 ### 1. Start the hub (operator, one VPS)
 
@@ -62,7 +62,7 @@ aweshare hub serve       # listens on :8787 (put Caddy/nginx TLS in front)
 
 ```bash
 docker run -d --name aweshare-hub --restart unless-stopped \
-  -p 127.0.0.1:8787:8787 -v "$PWD/data:/data" ghcr.io/mugpeng/aweshare:latest
+  -p 127.0.0.1:8787:8787 -v "$PWD/data:/data" ghcr.io/wehuman01/aweshare:latest
 docker exec aweshare-hub node apps/hub/dist/cli.js init   # first run: prints the admin token, save it
 ```
 
@@ -232,7 +232,7 @@ aweshare hub serve
 aweshare agent doctor
 ```
 
-Releasing: push a `v*` tag with a matching `## [x.y.z]` section in `docs/CHANGELOG.md`; CI publishes `aweshare-protocol` + `aweshare` to npm (needs the `NPM_TOKEN` secret) and the Docker image to `ghcr.io/mugpeng/aweshare`.
+Releasing: push a `v*` tag with a matching `## [x.y.z]` section in `docs/CHANGELOG.md`; CI publishes the `aweshare` package to npm via Trusted Publishing (OIDC, no token secret) and the Docker image to `ghcr.io/wehuman01/aweshare`.
 
 Layout: `packages/protocol` (shared wire protocol) · `apps/hub` (HTTP+WS+SQLite+CLI) · `apps/agent` (CLI). Design docs live in `docs/specs/`; the changelog in `docs/CHANGELOG.md`; contribution scope in [CONTRIBUTING.md](./CONTRIBUTING.md).
 

package/apps/agent/dist/config.js

@@ -1,7 +1,7 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { homedir } from 'node:os';
 import { dirname, join } from 'node:path';
-import { isValidAlias, PROTOCOLS } from 'aweshare-protocol';
+import { isValidAlias, PROTOCOLS } from '../../../packages/protocol/dist/index.js';
 import { parse as parseToml } from 'smol-toml';
 export function agentDir(env = process.env) {
     return env.AWESHARE_AGENT_DIR ?? join(homedir(), '.aweshare');

package/apps/agent/dist/connection.js

@@ -1,4 +1,4 @@
-import { BACKPRESSURE_LIMIT_BYTES, chunkBody, decodeChunkFrame, parseControlMessage, WIRE_VERSION, } from 'aweshare-protocol';
+import { BACKPRESSURE_LIMIT_BYTES, chunkBody, decodeChunkFrame, parseControlMessage, WIRE_VERSION, } from '../../../packages/protocol/dist/index.js';
 import pino, {} from 'pino';
 import { WebSocket } from 'ws';
 import { buildUpstreamRequest } from './adapters.js';

package/apps/hub/dist/admin.js

@@ -1,4 +1,4 @@
-import { parseAlias, roleForToken } from 'aweshare-protocol';
+import { parseAlias, roleForToken } from '../../../packages/protocol/dist/index.js';
 import { requireAdmin, requireConsumer, requireProducer } from './auth.js';
 import { addGrant, getConsumerByName, getProducerByName, insertConsumer, insertProducer, listGrants, listTokens, queryUsage, removeGrant, revokeToken, setConsumerConfig, } from './db.js';
 import { HttpError, readJson, sendJson } from './http.js';

package/apps/hub/dist/consumer.js

@@ -1,4 +1,4 @@
-import { parseAlias } from 'aweshare-protocol';
+import { parseAlias } from '../../../packages/protocol/dist/index.js';
 import { requireConsumer } from './auth.js';
 import { getGrant, getOffering, insertUsageEvent, listOfferingsForConsumer, sumTokensUsed, } from './db.js';
 import { HttpError, readBody, sendError, sendJson } from './http.js';

package/apps/hub/dist/tokens.js

@@ -1,6 +1,6 @@
 import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { TOKEN_PREFIXES } from 'aweshare-protocol';
+import { TOKEN_PREFIXES } from '../../../packages/protocol/dist/index.js';
 /** 32 random bytes -> 43 base64url chars; matches TOKEN_PATTERN. */
 export function generateToken(role) {
     return TOKEN_PREFIXES[role] + randomBytes(32).toString('base64url');

package/apps/hub/dist/tunnel.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { EventEmitter } from 'node:events';
-import { BACKPRESSURE_LIMIT_BYTES, chunkBody, decodeChunkFrame, isValidAlias, PROTOCOLS, parseControlMessage, WIRE_VERSION, } from 'aweshare-protocol';
+import { BACKPRESSURE_LIMIT_BYTES, chunkBody, decodeChunkFrame, isValidAlias, PROTOCOLS, parseControlMessage, WIRE_VERSION, } from '../../../packages/protocol/dist/index.js';
 import { WebSocket, WebSocketServer } from 'ws';
 import { findProducerByHash, upsertOfferings } from './db.js';
 import { hashToken } from './tokens.js';

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "aweshare",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "type": "module",
   "description": "Open-source, local-first AI capability relay",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/mugpeng/aweshare.git"
+    "url": "git+https://github.com/wehuman01/aweshare.git"
   },
   "bin": {
     "aweshare": "./bin/aweshare.mjs"
@@ -19,7 +19,8 @@
     "apps/hub/dist",
     "apps/hub/package.json",
     "apps/agent/dist",
-    "apps/agent/package.json"
+    "apps/agent/package.json",
+    "packages/protocol/dist"
   ],
   "publishConfig": {
     "access": "public"
@@ -28,8 +29,7 @@
     "better-sqlite3": "^12.2.0",
     "pino": "^9.7.0",
     "smol-toml": "^1.4.2",
-    "ws": "^8.18.3",
-    "aweshare-protocol": "0.2.0"
+    "ws": "^8.18.3"
   },
   "devDependencies": {
     "@anthropic-ai/sdk": "^0.117.1",
@@ -40,7 +40,7 @@
     "vitest": "^3.2.4"
   },
   "scripts": {
-    "build": "tsc -b",
+    "build": "tsc -b && node scripts/inline-protocol.mjs",
     "test": "vitest run",
     "check": "biome check ."
   }

package/packages/protocol/dist/alias.d.ts

@@ -0,0 +1,6 @@
+export interface ParsedAlias {
+    namespace: string;
+    name: string;
+}
+export declare function parseAlias(alias: string): ParsedAlias | null;
+export declare function isValidAlias(alias: string): boolean;

package/packages/protocol/dist/alias.js

@@ -0,0 +1,23 @@
+/**
+ * Model alias: `namespace/name`, e.g. `peng/gpt-4o`.
+ * namespace == producer name; name is the public label, mapped to a real
+ * upstream model id by the producer's offering.
+ */
+const NAMESPACE = /^[a-z0-9][a-z0-9-]{1,31}$/;
+const NAME = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+export function parseAlias(alias) {
+    if (typeof alias !== 'string')
+        return null;
+    const slash = alias.indexOf('/');
+    if (slash <= 0 || slash !== alias.lastIndexOf('/'))
+        return null;
+    const namespace = alias.slice(0, slash);
+    const name = alias.slice(slash + 1);
+    if (!NAMESPACE.test(namespace) || !NAME.test(name))
+        return null;
+    return { namespace, name };
+}
+export function isValidAlias(alias) {
+    return parseAlias(alias) !== null;
+}
+//# sourceMappingURL=alias.js.map

package/packages/protocol/dist/alias.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alias.js","sourceRoot":"","sources":["../src/alias.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,SAAS,GAAG,2BAA2B,CAAA;AAC7C,MAAM,IAAI,GAAG,6BAA6B,CAAA;AAO1C,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;AACnC,CAAC"}

package/packages/protocol/dist/errors.d.ts

@@ -0,0 +1,23 @@
+/** Stable error codes shared by hub, agent and tunnel wire messages. */
+export declare const ERROR_CODES: {
+    readonly PROTOCOL_MISMATCH: "PROTOCOL_MISMATCH";
+    readonly INVALID_KEY: "INVALID_KEY";
+    readonly NOT_GRANTED: "NOT_GRANTED";
+    readonly ALIAS_NOT_FOUND: "ALIAS_NOT_FOUND";
+    readonly RATE_LIMITED: "RATE_LIMITED";
+    readonly PRODUCER_MAX_CONCURRENCY: "PRODUCER_MAX_CONCURRENCY";
+    readonly GRANT_EXPIRED: "GRANT_EXPIRED";
+    readonly QUOTA_EXCEEDED: "QUOTA_EXCEEDED";
+    readonly UPSTREAM_ERROR: "UPSTREAM_ERROR";
+    readonly BACKEND_UNREACHABLE: "BACKEND_UNREACHABLE";
+    readonly BACKEND_TIMEOUT: "BACKEND_TIMEOUT";
+    readonly PRODUCER_OFFLINE: "PRODUCER_OFFLINE";
+    readonly BACKEND_DEGRADED: "BACKEND_DEGRADED";
+    readonly STREAM_IDLE_TIMEOUT: "STREAM_IDLE_TIMEOUT";
+    readonly TICKET_EXPIRED: "TICKET_EXPIRED";
+    readonly TUNNEL_CLOSED: "TUNNEL_CLOSED";
+    readonly BACKEND_NOT_FOUND: "BACKEND_NOT_FOUND";
+    readonly REQUEST_CANCELED: "REQUEST_CANCELED";
+    readonly WIRE_VERSION_MISMATCH: "WIRE_VERSION_MISMATCH";
+};
+export type ErrorCode = (typeof ERROR_CODES)[keyof typeof ERROR_CODES];

package/packages/protocol/dist/errors.js

@@ -0,0 +1,23 @@
+/** Stable error codes shared by hub, agent and tunnel wire messages. */
+export const ERROR_CODES = {
+    PROTOCOL_MISMATCH: 'PROTOCOL_MISMATCH',
+    INVALID_KEY: 'INVALID_KEY',
+    NOT_GRANTED: 'NOT_GRANTED',
+    ALIAS_NOT_FOUND: 'ALIAS_NOT_FOUND',
+    RATE_LIMITED: 'RATE_LIMITED',
+    PRODUCER_MAX_CONCURRENCY: 'PRODUCER_MAX_CONCURRENCY',
+    GRANT_EXPIRED: 'GRANT_EXPIRED',
+    QUOTA_EXCEEDED: 'QUOTA_EXCEEDED',
+    UPSTREAM_ERROR: 'UPSTREAM_ERROR',
+    BACKEND_UNREACHABLE: 'BACKEND_UNREACHABLE',
+    BACKEND_TIMEOUT: 'BACKEND_TIMEOUT',
+    PRODUCER_OFFLINE: 'PRODUCER_OFFLINE',
+    BACKEND_DEGRADED: 'BACKEND_DEGRADED',
+    STREAM_IDLE_TIMEOUT: 'STREAM_IDLE_TIMEOUT',
+    TICKET_EXPIRED: 'TICKET_EXPIRED',
+    TUNNEL_CLOSED: 'TUNNEL_CLOSED',
+    BACKEND_NOT_FOUND: 'BACKEND_NOT_FOUND',
+    REQUEST_CANCELED: 'REQUEST_CANCELED',
+    WIRE_VERSION_MISMATCH: 'WIRE_VERSION_MISMATCH',
+};
+//# sourceMappingURL=errors.js.map

package/packages/protocol/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,iBAAiB,EAAE,mBAAmB;IACtC,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,eAAe,EAAE,iBAAiB;IAClC,YAAY,EAAE,cAAc;IAC5B,wBAAwB,EAAE,0BAA0B;IACpD,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,mBAAmB,EAAE,qBAAqB;IAC1C,eAAe,EAAE,iBAAiB;IAClC,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,mBAAmB,EAAE,qBAAqB;IAC1C,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,mBAAmB;IACtC,gBAAgB,EAAE,kBAAkB;IACpC,qBAAqB,EAAE,uBAAuB;CACtC,CAAA"}

package/packages/protocol/dist/frames.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Binary data frame: `[16-byte requestId][payload]`, payload <= MAX_CHUNK_BYTES.
+ *
+ * Direction gives the frame its meaning — there is no type byte:
+ *  - hub -> agent: request body chunk
+ *  - agent -> hub: response body chunk
+ * This holds because a connection only ever carries requests in one direction.
+ */
+export declare const REQUEST_ID_BYTES = 16;
+export declare const MAX_CHUNK_BYTES: number;
+/** Sender pauses feeding its source stream above this pending buffer. */
+export declare const BACKPRESSURE_LIMIT_BYTES: number;
+export interface ChunkFrame {
+    requestId: string;
+    payload: Uint8Array;
+}
+export declare function encodeChunkFrame(requestId: string, payload: Uint8Array): Uint8Array;
+export declare function decodeChunkFrame(data: ArrayBufferView | ArrayBuffer): ChunkFrame;
+/** Split a body into chunk frames; an empty body yields zero frames. */
+export declare function chunkBody(requestId: string, body: Uint8Array): Uint8Array[];

package/packages/protocol/dist/frames.js

@@ -0,0 +1,54 @@
+/**
+ * Binary data frame: `[16-byte requestId][payload]`, payload <= MAX_CHUNK_BYTES.
+ *
+ * Direction gives the frame its meaning — there is no type byte:
+ *  - hub -> agent: request body chunk
+ *  - agent -> hub: response body chunk
+ * This holds because a connection only ever carries requests in one direction.
+ */
+export const REQUEST_ID_BYTES = 16;
+export const MAX_CHUNK_BYTES = 64 * 1024;
+/** Sender pauses feeding its source stream above this pending buffer. */
+export const BACKPRESSURE_LIMIT_BYTES = 1024 * 1024;
+const HEX = /^[0-9a-f]{32}$/;
+export function encodeChunkFrame(requestId, payload) {
+    if (!HEX.test(requestId)) {
+        throw new Error(`invalid requestId (want 32 lowercase hex chars): ${requestId}`);
+    }
+    if (payload.byteLength > MAX_CHUNK_BYTES) {
+        throw new Error(`chunk too large: ${payload.byteLength} > ${MAX_CHUNK_BYTES}`);
+    }
+    const frame = new Uint8Array(REQUEST_ID_BYTES + payload.byteLength);
+    frame.set(hexToBytes(requestId), 0);
+    frame.set(payload, REQUEST_ID_BYTES);
+    return frame;
+}
+export function decodeChunkFrame(data) {
+    const bytes = data instanceof ArrayBuffer
+        ? new Uint8Array(data)
+        : new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
+    if (bytes.byteLength < REQUEST_ID_BYTES) {
+        throw new Error(`binary frame too short: ${bytes.byteLength}`);
+    }
+    const idBytes = bytes.subarray(0, REQUEST_ID_BYTES);
+    let requestId = '';
+    for (const b of idBytes)
+        requestId += b.toString(16).padStart(2, '0');
+    return { requestId, payload: bytes.subarray(REQUEST_ID_BYTES) };
+}
+/** Split a body into chunk frames; an empty body yields zero frames. */
+export function chunkBody(requestId, body) {
+    const frames = [];
+    for (let off = 0; off < body.byteLength; off += MAX_CHUNK_BYTES) {
+        frames.push(encodeChunkFrame(requestId, body.subarray(off, off + MAX_CHUNK_BYTES)));
+    }
+    return frames;
+}
+function hexToBytes(hex) {
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        out[i] = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+//# sourceMappingURL=frames.js.map

package/packages/protocol/dist/frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frames.js","sourceRoot":"","sources":["../src/frames.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAA;AACxC,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAA;AAEnD,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAO5B,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAmB;IACrE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,GAAG,eAAe,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,UAAU,MAAM,eAAe,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACnE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;IACnC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACpC,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAmC;IAClE,MAAM,KAAK,GACT,IAAI,YAAY,WAAW;QACzB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QACtB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACnE,IAAI,KAAK,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACnD,IAAI,SAAS,GAAG,EAAE,CAAA;IAClB,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAA;AACjE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,IAAgB;IAC3D,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/packages/protocol/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './alias.js';
+export * from './errors.js';
+export * from './frames.js';
+export * from './messages.js';
+export * from './tokens.js';

package/packages/protocol/dist/index.js

@@ -0,0 +1,6 @@
+export * from './alias.js';
+export * from './errors.js';
+export * from './frames.js';
+export * from './messages.js';
+export * from './tokens.js';
+//# sourceMappingURL=index.js.map

package/packages/protocol/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA"}

package/packages/protocol/dist/messages.d.ts

@@ -0,0 +1,86 @@
+import type { ErrorCode } from './errors.js';
+export declare const WIRE_VERSION = 1;
+export type Protocol = 'openai' | 'anthropic' | 'responses';
+export declare const PROTOCOLS: readonly Protocol[];
+/** Registered by the agent; alias must be `<producerName>/<name>`. */
+export interface Offering {
+    alias: string;
+    protocol: Protocol;
+    /** Real upstream model id (e.g. the full ollama tag), may differ from the alias. */
+    upstreamModel: string;
+    backendId: string;
+    /** Per-offering concurrent request cap the hub enforces; default 1. */
+    maxConcurrency: number;
+}
+export type BackendState = 'ok' | 'degraded';
+export interface BackendStatus {
+    state: BackendState;
+    /** Failure class when degraded: AUTH | QUOTA | HTTP | NETWORK | CANCELLED */
+    reason?: string;
+}
+export interface RegisterMessage {
+    type: 'register';
+    offerings: Offering[];
+}
+export interface HeartbeatMessage {
+    type: 'heartbeat';
+    backendStatus: Record<string, BackendStatus>;
+}
+export interface ResponseHeadMessage {
+    type: 'response.head';
+    requestId: string;
+    status: number;
+    headers: Record<string, string>;
+}
+export interface ResponseEndMessage {
+    type: 'response.end';
+    requestId: string;
+}
+export interface ResponseErrorMessage {
+    type: 'response.error';
+    requestId: string;
+    code: ErrorCode | string;
+    message: string;
+}
+export interface HelloMessage {
+    type: 'hello';
+    wireVersion: number;
+}
+export interface RegisteredMessage {
+    type: 'registered';
+    accepted: string[];
+    rejected: {
+        alias: string;
+        reason: string;
+    }[];
+}
+/**
+ * Tunnel path is version-free: `/chat/completions`, `/messages` or `/responses`.
+ * The agent's protocol adapter rebuilds the upstream URL from backend rules
+ * (openai-style baseUrl includes /v1, anthropic baseUrl does not).
+ */
+export interface RequestStartMessage {
+    type: 'request.start';
+    requestId: string;
+    protocol: Protocol;
+    /** Backend the hub routed to (from the offering); the agent maps it to its config. */
+    backendId: string;
+    method: string;
+    path: string;
+    query: Record<string, string> | null;
+    /** Sanitized: consumer auth and hop-by-hop headers already removed. */
+    headers: Record<string, string>;
+}
+export interface RequestEndMessage {
+    type: 'request.end';
+    requestId: string;
+}
+export interface RequestCancelMessage {
+    type: 'request.cancel';
+    requestId: string;
+}
+export type AgentToHubMessage = RegisterMessage | HeartbeatMessage | ResponseHeadMessage | ResponseEndMessage | ResponseErrorMessage;
+export type HubToAgentMessage = HelloMessage | RegisteredMessage | RequestStartMessage | RequestEndMessage | RequestCancelMessage;
+export type ControlMessage = AgentToHubMessage | HubToAgentMessage;
+/** Parse a JSON text frame into a control message; throws on garbage. */
+export declare function parseControlMessage(raw: string): ControlMessage;

package/packages/protocol/dist/messages.js

@@ -0,0 +1,33 @@
+export const WIRE_VERSION = 1;
+export const PROTOCOLS = ['openai', 'anthropic', 'responses'];
+const KNOWN_TYPES = new Set([
+    'register',
+    'heartbeat',
+    'response.head',
+    'response.end',
+    'response.error',
+    'hello',
+    'registered',
+    'request.start',
+    'request.end',
+    'request.cancel',
+]);
+/** Parse a JSON text frame into a control message; throws on garbage. */
+export function parseControlMessage(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error('control frame is not valid JSON');
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new Error('control frame is not an object');
+    }
+    const type = parsed.type;
+    if (typeof type !== 'string' || !KNOWN_TYPES.has(type)) {
+        throw new Error(`unknown control message type: ${String(type)}`);
+    }
+    return parsed;
+}
+//# sourceMappingURL=messages.js.map

package/packages/protocol/dist/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../src/messages.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAA;AAI7B,MAAM,CAAC,MAAM,SAAS,GAAwB,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;AA6GlF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS;IAClC,UAAU;IACV,WAAW;IACX,eAAe;IACf,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,YAAY;IACZ,eAAe;IACf,aAAa;IACb,gBAAgB;CACjB,CAAC,CAAA;AAEF,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,IAAI,GAAI,MAA6B,CAAC,IAAI,CAAA;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,OAAO,MAAwB,CAAA;AACjC,CAAC"}

package/packages/protocol/dist/tokens.d.ts

@@ -0,0 +1,10 @@
+/** Token prefixes identify a token's role without a database lookup. */
+export declare const TOKEN_PREFIXES: {
+    readonly producer: "asp_";
+    readonly consumer: "asc_";
+    readonly admin: "asa_";
+};
+export type TokenRole = keyof typeof TOKEN_PREFIXES;
+/** Tokens are `prefix + base64url(32 random bytes)`; base64url alphabet is [-_A-Za-z0-9]. */
+export declare const TOKEN_PATTERN: RegExp;
+export declare function roleForToken(token: string): TokenRole | null;

package/packages/protocol/dist/tokens.js

@@ -0,0 +1,16 @@
+/** Token prefixes identify a token's role without a database lookup. */
+export const TOKEN_PREFIXES = {
+    producer: 'asp_',
+    consumer: 'asc_',
+    admin: 'asa_',
+};
+/** Tokens are `prefix + base64url(32 random bytes)`; base64url alphabet is [-_A-Za-z0-9]. */
+export const TOKEN_PATTERN = /^as[pca]_[A-Za-z0-9_-]{43}$/;
+export function roleForToken(token) {
+    for (const [role, prefix] of Object.entries(TOKEN_PREFIXES)) {
+        if (token.startsWith(prefix))
+            return role;
+    }
+    return null;
+}
+//# sourceMappingURL=tokens.js.map

package/packages/protocol/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,KAAK,EAAE,MAAM;CACL,CAAA;AAIV,6FAA6F;AAC7F,MAAM,CAAC,MAAM,aAAa,GAAG,6BAA6B,CAAA;AAE1D,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAA0B,EAAE,CAAC;QACrF,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}