beddel 0.1.0

package/dist/server/api/graphql.js

@@ -0,0 +1,180 @@
+"use strict";
+/**
+ * GraphQL helpers used by the /api/graphql route.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getGraphQLSchema = getGraphQLSchema;
+exports.executeRegisteredMethod = executeRegisteredMethod;
+exports.handleGraphQLPost = handleGraphQLPost;
+exports.handleGraphQLGet = handleGraphQLGet;
+const agentRegistry_1 = require("../../agents/agentRegistry");
+const kvStore_1 = require("../kvStore");
+const runtimeSecurity_1 = require("../runtimeSecurity");
+const errors_1 = require("../errors");
+const schema = `
+  type Query { ping: String! }
+  type Mutation { executeMethod(methodName: String!, params: JSON!, props: JSON!): ExecutionResult! }
+  type ExecutionResult { success: Boolean!, data: JSON, error: String, executionTime: Int! }
+  scalar JSON
+`;
+function getGraphQLSchema() {
+    return schema;
+}
+async function executeRegisteredMethod(input, clientId) {
+    const startTime = Date.now();
+    const context = {
+        logs: [],
+        status: "running",
+        output: undefined,
+        error: undefined,
+        log: (message) => context.logs.push(`[${new Date().toISOString()}] ${message}`),
+        setOutput: (output) => {
+            context.output = output;
+            context.status = "success";
+        },
+        setError: (error) => {
+            context.error = error;
+            context.status = "error";
+        },
+    };
+    try {
+        context.log("Method execution initiated.");
+        if (!(0, runtimeSecurity_1.isValidMethodName)(input.methodName)) {
+            throw new errors_1.ValidationError("Invalid method name format");
+        }
+        const declarativeAgent = agentRegistry_1.agentRegistry.getAgent(input.methodName);
+        if (declarativeAgent) {
+            context.log(`Found declarative agent: ${input.methodName}`);
+            const result = await agentRegistry_1.agentRegistry.executeAgent(input.methodName, (0, runtimeSecurity_1.sanitizeInput)(input.params), (0, runtimeSecurity_1.sanitizeInput)(input.props), context);
+            const executionTime = Date.now() - startTime;
+            await (0, kvStore_1.logExecution)({
+                id: `log_${Date.now()}`,
+                clientId,
+                endpointName: input.methodName,
+                timestamp: new Date().toISOString(),
+                duration: executionTime,
+                success: true,
+                input: input.params,
+                output: result,
+                logs: context.logs,
+            });
+            return { success: true, data: result, executionTime };
+        }
+        const endpoint = await (0, kvStore_1.getEndpointByName)(input.methodName);
+        if (!endpoint) {
+            throw new errors_1.NotFoundError(`Method '${input.methodName}' not found`);
+        }
+        context.log(`Found endpoint: ${endpoint.name}`);
+        const sanitizedParams = (0, runtimeSecurity_1.sanitizeInput)(input.params);
+        const sanitizedProps = (0, runtimeSecurity_1.sanitizeInput)(input.props);
+        const { valid, missing } = (0, runtimeSecurity_1.validateRequiredProps)(endpoint.requiredProps, sanitizedProps);
+        if (!valid) {
+            throw new errors_1.ValidationError(`Missing required props: ${missing.join(", ")}`);
+        }
+        context.log("Props validated. Executing sandbox.");
+        await (0, runtimeSecurity_1.executeInSandbox)(endpoint.code, sanitizedParams, sanitizedProps, context);
+        context.log("Sandbox execution finished.");
+        if (context.status === "error") {
+            throw new Error(context.error || "Sandbox execution failed.");
+        }
+        if (context.status !== "success") {
+            throw new Error("Sandbox finished in an indeterminate state.");
+        }
+        const executionTime = Date.now() - startTime;
+        await (0, kvStore_1.logExecution)({
+            id: `log_${Date.now()}`,
+            clientId,
+            endpointName: input.methodName,
+            timestamp: new Date().toISOString(),
+            duration: executionTime,
+            success: true,
+            input: sanitizedParams,
+            output: context.output,
+            logs: context.logs,
+        });
+        return { success: true, data: context.output, executionTime };
+    }
+    catch (error) {
+        const executionTime = Date.now() - startTime;
+        const errorMessage = error instanceof Error ? error.message : "Unknown error";
+        if (!context.error)
+            context.setError(errorMessage);
+        await (0, kvStore_1.logExecution)({
+            id: `log_${Date.now()}`,
+            clientId,
+            endpointName: input.methodName,
+            timestamp: new Date().toISOString(),
+            duration: executionTime,
+            success: false,
+            error: errorMessage,
+            input: input.params,
+            logs: context.logs,
+        });
+        return { success: false, error: errorMessage, executionTime };
+    }
+}
+async function handleGraphQLPost(request) {
+    try {
+        let clientId;
+        const authHeader = request.headers.get("authorization");
+        if (authHeader && authHeader.startsWith("Bearer ")) {
+            const apiKey = authHeader.substring(7);
+            if (!(0, runtimeSecurity_1.isValidApiKey)(apiKey)) {
+                throw new errors_1.AuthenticationError("Invalid API key format");
+            }
+            const client = await (0, kvStore_1.getClientByApiKey)(apiKey);
+            if (!client)
+                throw new errors_1.AuthenticationError("Invalid API key");
+            const rateLimitOk = await (0, kvStore_1.checkRateLimit)(client.id, client.rateLimit);
+            if (!rateLimitOk)
+                throw new errors_1.RateLimitError("Rate limit exceeded.");
+            clientId = client.id;
+        }
+        else if (request.headers.get("x-admin-tenant") === "true") {
+            clientId = "admin_tenant";
+        }
+        else {
+            throw new errors_1.AuthenticationError("Missing or invalid authorization header");
+        }
+        const body = await request.json();
+        if (!body.query) {
+            throw new errors_1.ValidationError("Missing query in request body");
+        }
+        if (body.query && body.query.includes("executeMethod")) {
+            if (!body.variables || !body.variables.methodName) {
+                throw new errors_1.ValidationError("Missing 'variables' or 'methodName' in request body");
+            }
+            const result = await executeRegisteredMethod({
+                methodName: body.variables.methodName,
+                params: body.variables.params || {},
+                props: body.variables.props || {},
+            }, clientId);
+            return Response.json({ data: { executeMethod: result } });
+        }
+        return Response.json({ errors: [{ message: "Unsupported operation" }] }, { status: 400 });
+    }
+    catch (error) {
+        const status = error instanceof errors_1.AuthenticationError
+            ? 401
+            : error instanceof errors_1.RateLimitError
+                ? 429
+                : error instanceof errors_1.ValidationError
+                    ? 400
+                    : error instanceof errors_1.NotFoundError
+                        ? 404
+                        : 500;
+        return Response.json({
+            errors: [
+                {
+                    message: error instanceof Error ? error.message : "Internal server error",
+                },
+            ],
+        }, { status });
+    }
+}
+function handleGraphQLGet() {
+    return new Response(`<!DOCTYPE html>
+    <html><head><title>Opal Support API - GraphQL</title><style>body{font-family:sans-serif;max-width:800px;margin:50px auto;padding:20px}code,pre{background:#f4f4f4;padding:4px 8px;border-radius:4px}</style></head>
+    <body><h1>Opal Support API</h1><p>GraphQL endpoint for executing registered methods.</p><h2>Endpoint</h2><code>POST /api/graphql</code><h2>Authentication</h2><p>Use Bearer token in Authorization header.</p><h2>Schema</h2><pre>${schema}</pre></body></html>`, { headers: { "Content-Type": "text/html" } });
+}
+//# sourceMappingURL=graphql.js.map

package/dist/server/api/graphql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql.js","sourceRoot":"","sources":["../../../src/server/api/graphql.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAmCH,4CAEC;AAED,0DA2HC;AAED,8CAyEC;AAED,4CAOC;AApPD,8DAA2D;AAC3D,wCAKoB;AACpB,wDAM4B;AAC5B,sCAKmB;AAOnB,MAAM,MAAM,GAAG;;;;;CAKd,CAAC;AAEF,SAAgB,gBAAgB;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,uBAAuB,CAC3C,KAAyB,EACzB,QAAgB;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAqB;QAChC,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,CAAC,OAAe,EAAE,EAAE,CACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;QAC/D,SAAS,EAAE,CAAC,MAAe,EAAE,EAAE;YAC7B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;YACxB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QAC7B,CAAC;QACD,QAAQ,EAAE,CAAC,KAAa,EAAE,EAAE;YAC1B,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;YACtB,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;QAC3B,CAAC;KACF,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAA,mCAAiB,EAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,wBAAe,CAAC,4BAA4B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,gBAAgB,GAAG,6BAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAClE,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YAE5D,MAAM,MAAM,GAAG,MAAM,6BAAa,CAAC,YAAY,CAC7C,KAAK,CAAC,UAAU,EAChB,IAAA,+BAAa,EAAC,KAAK,CAAC,MAAM,CAAwB,EAClD,IAAA,+BAAa,EAAC,KAAK,CAAC,KAAK,CAA2B,EACpD,OAAO,CACR,CAAC;YAEF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC7C,MAAM,IAAA,sBAAY,EAAC;gBACjB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;gBACvB,QAAQ;gBACR,YAAY,EAAE,KAAK,CAAC,UAAU;gBAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,QAAQ,EAAE,aAAa;gBACvB,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,CAAC,IAAI;aACnB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACxD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAA,2BAAiB,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,sBAAa,CAAC,WAAW,KAAK,CAAC,UAAU,aAAa,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,eAAe,GAAG,IAAA,+BAAa,EAAC,KAAK,CAAC,MAAM,CAGjD,CAAC;QACF,MAAM,cAAc,GAAG,IAAA,+BAAa,EAAC,KAAK,CAAC,KAAK,CAA2B,CAAC;QAC5E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,uCAAqB,EAC9C,QAAQ,CAAC,aAAa,EACtB,cAAc,CACf,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,wBAAe,CACvB,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChD,CAAC;QACJ,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QACnD,MAAM,IAAA,kCAAgB,EACpB,QAAQ,CAAC,IAAI,EACb,eAAe,EACf,cAAc,EACd,OAAO,CACR,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC7C,MAAM,IAAA,sBAAY,EAAC;YACjB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;YACvB,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,UAAU;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,eAAe;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC7C,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAEnD,MAAM,IAAA,sBAAY,EAAC;YACjB,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE;YACvB,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,UAAU;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ,EAAE,aAAa;YACvB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;IAChE,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,OAAgB;IACtD,IAAI,CAAC;QACH,IAAI,QAAgB,CAAC;QACrB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAExD,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,IAAA,+BAAa,EAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,4BAAmB,CAAC,wBAAwB,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAiB,EAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,4BAAmB,CAAC,iBAAiB,CAAC,CAAC;YAC9D,MAAM,WAAW,GAAG,MAAM,IAAA,wBAAc,EAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACtE,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,uBAAc,CAAC,sBAAsB,CAAC,CAAC;YACnE,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC;QACvB,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM,EAAE,CAAC;YAC5D,QAAQ,GAAG,cAAc,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,4BAAmB,CAC3B,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,wBAAe,CAAC,+BAA+B,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;gBAClD,MAAM,IAAI,wBAAe,CACvB,qDAAqD,CACtD,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C;gBACE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU;gBACrC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE;gBACnC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;aAClC,EACD,QAAQ,CACT,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAClB,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,EAAE,EAClD,EAAE,MAAM,EAAE,GAAG,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GACV,KAAK,YAAY,4BAAmB;YAClC,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,KAAK,YAAY,uBAAc;gBACjC,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,KAAK,YAAY,wBAAe;oBAClC,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,KAAK,YAAY,sBAAa;wBAChC,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,GAAG,CAAC;QACV,OAAO,QAAQ,CAAC,IAAI,CAClB;YACE,MAAM,EAAE;gBACN;oBACE,OAAO,EACL,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB;iBACnE;aACF;SACF,EACD,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,IAAI,QAAQ,CACjB;;wOAEoO,MAAM,sBAAsB,EAChQ,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,EAAE,CAC7C,CAAC;AACJ,CAAC"}

package/dist/server/errors.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Custom error classes shared across server runtimes.
+ */
+export declare class AuthenticationError extends Error {
+    constructor(message?: string);
+}
+export declare class RateLimitError extends Error {
+    constructor(message?: string);
+}
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+export declare class ExecutionError extends Error {
+    constructor(message: string);
+}
+export declare class NotFoundError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/server/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,SAA0B;CAI9C;AAED,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,SAAwB;CAI5C;AAED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/server/errors.js

@@ -0,0 +1,42 @@
+"use strict";
+/**
+ * Custom error classes shared across server runtimes.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NotFoundError = exports.ExecutionError = exports.ValidationError = exports.RateLimitError = exports.AuthenticationError = void 0;
+class AuthenticationError extends Error {
+    constructor(message = "Authentication failed") {
+        super(message);
+        this.name = "AuthenticationError";
+    }
+}
+exports.AuthenticationError = AuthenticationError;
+class RateLimitError extends Error {
+    constructor(message = "Rate limit exceeded") {
+        super(message);
+        this.name = "RateLimitError";
+    }
+}
+exports.RateLimitError = RateLimitError;
+class ValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ValidationError";
+    }
+}
+exports.ValidationError = ValidationError;
+class ExecutionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ExecutionError";
+    }
+}
+exports.ExecutionError = ExecutionError;
+class NotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "NotFoundError";
+    }
+}
+exports.NotFoundError = NotFoundError;
+//# sourceMappingURL=errors.js.map

package/dist/server/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAEH,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAO,GAAG,uBAAuB;QAC3C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAO,GAAG,qBAAqB;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED,MAAa,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED,MAAa,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED,MAAa,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC"}

package/dist/server/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./types";
+export * from "./errors";
+export * from "./kvStore";
+export * from "./runtimeSecurity";
+export { agentRegistry } from "../agents/agentRegistry";
+export type { AgentRegistration } from "../agents/agentRegistry";
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,24 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentRegistry = void 0;
+__exportStar(require("./types"), exports);
+__exportStar(require("./errors"), exports);
+__exportStar(require("./kvStore"), exports);
+__exportStar(require("./runtimeSecurity"), exports);
+var agentRegistry_1 = require("../agents/agentRegistry");
+Object.defineProperty(exports, "agentRegistry", { enumerable: true, get: function () { return agentRegistry_1.agentRegistry; } });
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,2CAAyB;AACzB,4CAA0B;AAC1B,oDAAkC;AAClC,yDAAwD;AAA/C,8GAAA,aAAa,OAAA"}

package/dist/server/kvStore.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Upstash KV helpers shared between the Next.js runtime and npm package.
+ */
+import type { Client, Endpoint, ExecutionLog } from "./types";
+export declare const KV_PREFIXES: {
+    readonly CLIENT: "client:";
+    readonly API_KEY: "apikey:";
+    readonly ENDPOINT: "endpoint:";
+    readonly ENDPOINT_NAME: "endpoint:name:";
+    readonly EXECUTION_LOG: "log:";
+    readonly RATE_LIMIT: "ratelimit:";
+    readonly CLIENTS_LIST: "clients:list";
+    readonly ENDPOINTS_LIST: "endpoints:list";
+};
+export declare function getClient(clientId: string): Promise<Client | null>;
+export declare function getClientByApiKey(apiKey: string): Promise<Client | null>;
+export declare function getAllClients(): Promise<Client[]>;
+export declare function saveClient(client: Client): Promise<void>;
+export declare function deleteClient(clientId: string): Promise<void>;
+export declare function getEndpoint(endpointId: string): Promise<Endpoint | null>;
+export declare function getEndpointByName(name: string): Promise<Endpoint | null>;
+export declare function getAllEndpoints(): Promise<Endpoint[]>;
+export declare function saveEndpoint(endpoint: Endpoint): Promise<void>;
+export declare function deleteEndpoint(endpointId: string): Promise<void>;
+export declare function logExecution(log: ExecutionLog): Promise<void>;
+export declare function checkRateLimit(clientId: string, limit: number): Promise<boolean>;
+//# sourceMappingURL=kvStore.d.ts.map

package/dist/server/kvStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kvStore.d.ts","sourceRoot":"","sources":["../../src/server/kvStore.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAW9D,eAAO,MAAM,WAAW;;;;;;;;;CASd,CAAC;AAEX,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAExE;AAED,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAI9E;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAMvD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAa9D;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAclE;AAED,wBAAsB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAE9E;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAM1B;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAM3D;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAapE;AAED,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYtE;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnE;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,OAAO,CAAC,CAclB"}

package/dist/server/kvStore.js

@@ -0,0 +1,128 @@
+"use strict";
+/**
+ * Upstash KV helpers shared between the Next.js runtime and npm package.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KV_PREFIXES = void 0;
+exports.getClient = getClient;
+exports.getClientByApiKey = getClientByApiKey;
+exports.getAllClients = getAllClients;
+exports.saveClient = saveClient;
+exports.deleteClient = deleteClient;
+exports.getEndpoint = getEndpoint;
+exports.getEndpointByName = getEndpointByName;
+exports.getAllEndpoints = getAllEndpoints;
+exports.saveEndpoint = saveEndpoint;
+exports.deleteEndpoint = deleteEndpoint;
+exports.logExecution = logExecution;
+exports.checkRateLimit = checkRateLimit;
+const redis_1 = require("@upstash/redis");
+if (!process.env.KV_REST_API_URL || !process.env.KV_REST_API_TOKEN) {
+    throw new Error("Missing Upstash Redis credentials in environment variables");
+}
+const redis = new redis_1.Redis({
+    url: process.env.KV_REST_API_URL,
+    token: process.env.KV_REST_API_TOKEN,
+});
+exports.KV_PREFIXES = {
+    CLIENT: "client:",
+    API_KEY: "apikey:",
+    ENDPOINT: "endpoint:",
+    ENDPOINT_NAME: "endpoint:name:",
+    EXECUTION_LOG: "log:",
+    RATE_LIMIT: "ratelimit:",
+    CLIENTS_LIST: "clients:list",
+    ENDPOINTS_LIST: "endpoints:list",
+};
+async function getClient(clientId) {
+    return await redis.get(`${exports.KV_PREFIXES.CLIENT}${clientId}`);
+}
+async function getClientByApiKey(apiKey) {
+    const clientId = await redis.get(`${exports.KV_PREFIXES.API_KEY}${apiKey}`);
+    if (!clientId)
+        return null;
+    return await getClient(clientId);
+}
+async function getAllClients() {
+    const clientIds = (await redis.get(exports.KV_PREFIXES.CLIENTS_LIST)) || [];
+    if (clientIds.length === 0)
+        return [];
+    const clients = await Promise.all(clientIds.map((id) => getClient(id)));
+    return clients.filter((c) => c !== null);
+}
+async function saveClient(client) {
+    await redis.set(`${exports.KV_PREFIXES.CLIENT}${client.id}`, JSON.stringify(client));
+    for (const apiKey of client.apiKeys) {
+        await redis.set(`${exports.KV_PREFIXES.API_KEY}${apiKey}`, client.id);
+    }
+    const clientIds = (await redis.get(exports.KV_PREFIXES.CLIENTS_LIST)) || [];
+    if (!clientIds.includes(client.id)) {
+        clientIds.push(client.id);
+        await redis.set(exports.KV_PREFIXES.CLIENTS_LIST, clientIds);
+    }
+}
+async function deleteClient(clientId) {
+    const client = await getClient(clientId);
+    if (!client)
+        return;
+    for (const apiKey of client.apiKeys) {
+        await redis.del(`${exports.KV_PREFIXES.API_KEY}${apiKey}`);
+    }
+    let clientIds = (await redis.get(exports.KV_PREFIXES.CLIENTS_LIST)) || [];
+    clientIds = clientIds.filter((id) => id !== clientId);
+    await redis.set(exports.KV_PREFIXES.CLIENTS_LIST, clientIds);
+    await redis.del(`${exports.KV_PREFIXES.CLIENT}${clientId}`);
+}
+async function getEndpoint(endpointId) {
+    return await redis.get(`${exports.KV_PREFIXES.ENDPOINT}${endpointId}`);
+}
+async function getEndpointByName(name) {
+    const endpointId = await redis.get(`${exports.KV_PREFIXES.ENDPOINT_NAME}${name}`);
+    if (!endpointId)
+        return null;
+    return await getEndpoint(endpointId);
+}
+async function getAllEndpoints() {
+    const endpointIds = (await redis.get(exports.KV_PREFIXES.ENDPOINTS_LIST)) || [];
+    if (endpointIds.length === 0)
+        return [];
+    const endpoints = await Promise.all(endpointIds.map((id) => getEndpoint(id)));
+    return endpoints.filter((e) => e !== null);
+}
+async function saveEndpoint(endpoint) {
+    await redis.set(`${exports.KV_PREFIXES.ENDPOINT}${endpoint.id}`, JSON.stringify(endpoint));
+    await redis.set(`${exports.KV_PREFIXES.ENDPOINT_NAME}${endpoint.name}`, endpoint.id);
+    const endpointIds = (await redis.get(exports.KV_PREFIXES.ENDPOINTS_LIST)) || [];
+    if (!endpointIds.includes(endpoint.id)) {
+        endpointIds.push(endpoint.id);
+        await redis.set(exports.KV_PREFIXES.ENDPOINTS_LIST, endpointIds);
+    }
+}
+async function deleteEndpoint(endpointId) {
+    const endpoint = await getEndpoint(endpointId);
+    if (!endpoint)
+        return;
+    await redis.del(`${exports.KV_PREFIXES.ENDPOINT_NAME}${endpoint.name}`);
+    let endpointIds = (await redis.get(exports.KV_PREFIXES.ENDPOINTS_LIST)) || [];
+    endpointIds = endpointIds.filter((id) => id !== endpointId);
+    await redis.set(exports.KV_PREFIXES.ENDPOINTS_LIST, endpointIds);
+    await redis.del(`${exports.KV_PREFIXES.ENDPOINT}${endpointId}`);
+}
+async function logExecution(log) {
+    const key = `${exports.KV_PREFIXES.EXECUTION_LOG}${log.id}`;
+    await redis.set(key, JSON.stringify(log), {
+        ex: 60 * 60 * 24 * 30,
+    });
+}
+async function checkRateLimit(clientId, limit) {
+    const key = `${exports.KV_PREFIXES.RATE_LIMIT}${clientId}`;
+    const pipeline = redis.pipeline();
+    pipeline.incr(key);
+    pipeline.ttl(key);
+    const [current, ttl] = await pipeline.exec();
+    if (ttl === -1) {
+        await redis.expire(key, 60);
+    }
+    return current <= limit;
+}
+//# sourceMappingURL=kvStore.js.map

package/dist/server/kvStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kvStore.js","sourceRoot":"","sources":["../../src/server/kvStore.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAyBH,8BAEC;AAED,8CAIC;AAED,sCAMC;AAED,gCAaC;AAED,oCAcC;AAED,kCAEC;AAED,8CAQC;AAED,0CAMC;AAED,oCAaC;AAED,wCAYC;AAED,oCAKC;AAED,wCAiBC;AAnJD,0CAAuC;AAGvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;IACnE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,KAAK,GAAG,IAAI,aAAK,CAAC;IACtB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe;IAChC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB;CACrC,CAAC,CAAC;AAEU,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,SAAS;IACjB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,WAAW;IACrB,aAAa,EAAE,gBAAgB;IAC/B,aAAa,EAAE,MAAM;IACrB,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;CACxB,CAAC;AAEJ,KAAK,UAAU,SAAS,CAAC,QAAgB;IAC9C,OAAO,MAAM,KAAK,CAAC,GAAG,CAAS,GAAG,mBAAW,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;AACrE,CAAC;AAEM,KAAK,UAAU,iBAAiB,CAAC,MAAc;IACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAS,GAAG,mBAAW,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;AACnC,CAAC;AAEM,KAAK,UAAU,aAAa;IACjC,MAAM,SAAS,GACb,CAAC,MAAM,KAAK,CAAC,GAAG,CAAW,mBAAW,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACxD,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,MAAc;IAC7C,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,OAAO,GAAG,MAAM,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GACb,CAAC,MAAM,KAAK,CAAC,GAAG,CAAW,mBAAW,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,SAAS,GACX,CAAC,MAAM,KAAK,CAAC,GAAG,CAAW,mBAAW,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAW,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAErD,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;AACtD,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,UAAkB;IAClD,OAAO,MAAM,KAAK,CAAC,GAAG,CAAW,GAAG,mBAAW,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC,CAAC;AAC3E,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACrC,IAAY;IAEZ,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,GAAG,CAChC,GAAG,mBAAW,CAAC,aAAa,GAAG,IAAI,EAAE,CACtC,CAAC;IACF,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAEM,KAAK,UAAU,eAAe;IACnC,MAAM,WAAW,GACf,CAAC,MAAM,KAAK,CAAC,GAAG,CAAW,mBAAW,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC5D,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,QAAkB;IACnD,MAAM,KAAK,CAAC,GAAG,CACb,GAAG,mBAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC,EAAE,EAAE,EACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACzB,CAAC;IACF,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAE7E,MAAM,WAAW,GACf,CAAC,MAAM,KAAK,CAAC,GAAG,CAAW,mBAAW,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAW,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,UAAkB;IACrD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO;IAEtB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEhE,IAAI,WAAW,GACb,CAAC,MAAM,KAAK,CAAC,GAAG,CAAW,mBAAW,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IAC5D,MAAM,KAAK,CAAC,GAAG,CAAC,mBAAW,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAEzD,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAW,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC,CAAC;AAC1D,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,GAAiB;IAClD,MAAM,GAAG,GAAG,GAAG,mBAAW,CAAC,aAAa,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC;IACpD,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE;QACxC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,KAAa;IAEb,MAAM,GAAG,GAAG,GAAG,mBAAW,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;IAEnD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAElB,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAoB,CAAC;IAE/D,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,IAAI,KAAK,CAAC;AAC1B,CAAC"}

package/dist/server/runtimeSecurity.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Security helpers used by the Next.js runtime and exported as part of the package.
+ */
+import type { ExecutionContext } from "./types";
+/**
+ * Sanitize user input to prevent code injection
+ */
+export declare function sanitizeInput(input: unknown): unknown;
+/**
+ * Validate method name (alphanumeric, underscores, and hyphens)
+ */
+export declare function isValidMethodName(name: string): boolean;
+/**
+ * Validate API key format
+ */
+export declare function isValidApiKey(apiKey: string): boolean;
+/**
+ * Execute stored code in a sandbox scope with a time limit.
+ */
+export declare function executeInSandbox(code: string, params: Record<string, unknown>, props: Record<string, string>, context: ExecutionContext): Promise<void>;
+/**
+ * Validate required props are provided
+ */
+export declare function validateRequiredProps(requiredProps: string[], providedProps: Record<string, string>): {
+    valid: boolean;
+    missing: string[];
+};
+//# sourceMappingURL=runtimeSecurity.d.ts.map

package/dist/server/runtimeSecurity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSecurity.d.ts","sourceRoot":"","sources":["../../src/server/runtimeSecurity.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAsBrD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EAAE,EACvB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACpC;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAMvC"}

package/dist/server/runtimeSecurity.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Security helpers used by the Next.js runtime and exported as part of the package.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeInput = sanitizeInput;
+exports.isValidMethodName = isValidMethodName;
+exports.isValidApiKey = isValidApiKey;
+exports.executeInSandbox = executeInSandbox;
+exports.validateRequiredProps = validateRequiredProps;
+/**
+ * Sanitize user input to prevent code injection
+ */
+function sanitizeInput(input) {
+    if (typeof input === "string") {
+        return input
+            .replace(/[<>]/g, "")
+            .replace(/javascript:/gi, "")
+            .replace(/on\w+=/gi, "")
+            .trim();
+    }
+    if (Array.isArray(input)) {
+        return input.map(sanitizeInput);
+    }
+    if (typeof input === "object" && input !== null) {
+        const sanitized = {};
+        for (const [key, value] of Object.entries(input)) {
+            sanitized[key] = sanitizeInput(value);
+        }
+        return sanitized;
+    }
+    return input;
+}
+/**
+ * Validate method name (alphanumeric, underscores, and hyphens)
+ */
+function isValidMethodName(name) {
+    return /^[a-zA-Z_-][a-zA-Z0-9_.-]*$/.test(name);
+}
+/**
+ * Validate API key format
+ */
+function isValidApiKey(apiKey) {
+    return /^opal_[a-z0-9_-]+_key_[a-zA-Z0-9]{12,}$/.test(apiKey);
+}
+/**
+ * Execute stored code in a sandbox scope with a time limit.
+ */
+async function executeInSandbox(code, params, props, context) {
+    const executionPromise = (async () => {
+        try {
+            const executeFunction = new Function(`return ${code}`)();
+            await executeFunction(params, props, context);
+        }
+        catch (error) {
+            console.error("[Sandbox Execution Error]:", error);
+            const errorMessage = error instanceof Error ? error.message : "Internal sandbox error";
+            if (context.status !== "error") {
+                context.setError(errorMessage);
+            }
+        }
+    })();
+    const timeoutPromise = new Promise((_, reject) => setTimeout(() => reject(new Error("Execution timed out after 3000ms")), 3000));
+    try {
+        await Promise.race([executionPromise, timeoutPromise]);
+    }
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : "Unknown sandbox error";
+        if (context.status !== "error") {
+            context.setError(errorMessage);
+        }
+        context.log(`Sandbox execution failed: ${errorMessage}`);
+    }
+}
+/**
+ * Validate required props are provided
+ */
+function validateRequiredProps(requiredProps, providedProps) {
+    const missing = requiredProps.filter((prop) => !providedProps[prop]);
+    return {
+        valid: missing.length === 0,
+        missing,
+    };
+}
+//# sourceMappingURL=runtimeSecurity.js.map

package/dist/server/runtimeSecurity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeSecurity.js","sourceRoot":"","sources":["../../src/server/runtimeSecurity.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAOH,sCAsBC;AAKD,8CAEC;AAKD,sCAEC;AAKD,4CAqCC;AAKD,sDASC;AA/FD;;GAEG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK;aACT,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,SAAS,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,OAAO,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,SAAgB,aAAa,CAAC,MAAc;IAC1C,OAAO,yCAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,MAA+B,EAC/B,KAA6B,EAC7B,OAAyB;IAEzB,MAAM,gBAAgB,GAAG,CAAC,KAAK,IAAI,EAAE;QACnC,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;YACzD,MAAM,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;YACpE,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,cAAc,GAAG,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACrD,UAAU,CACR,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,EAC3D,IAAI,CACL,CACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,6BAA6B,YAAY,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CACnC,aAAuB,EACvB,aAAqC;IAErC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QAC3B,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/server/types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Shared server-side types for the Opal Support App runtime.
+ * These live inside the Beddel package so both the Next.js app and
+ * the npm distribution reference exactly the same contracts.
+ */
+import type { ExecutionContext as DeclarativeExecutionContext } from "../types/executionContext";
+export interface Client {
+    id: string;
+    name: string;
+    email: string;
+    apiKeys: string[];
+    createdAt: string;
+    rateLimit: number;
+}
+export interface Endpoint {
+    id: string;
+    name: string;
+    description: string;
+    code: string;
+    visibility: "public" | "private";
+    requiredProps: string[];
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ExecutionLog {
+    id: string;
+    clientId: string;
+    endpointName: string;
+    timestamp: string;
+    duration: number;
+    success: boolean;
+    error?: string;
+    input?: unknown;
+    output?: unknown;
+    logs?: string[];
+}
+export type ExecutionContext = DeclarativeExecutionContext;
+export interface ExecuteMethodInput {
+    methodName: string;
+    params: Record<string, unknown>;
+    props: Record<string, string>;
+}
+export interface ExecuteMethodResult {
+    success: boolean;
+    data?: unknown;
+    error?: string;
+    executionTime: number;
+}
+export interface GraphQLContext {
+    clientId: string;
+    client: Client;
+}
+//# sourceMappingURL=types.d.ts.map