crewly 1.20.122 → 1.20.124

package/dist/backend/backend/src/controllers/harness/harness.controller.js

@@ -0,0 +1,204 @@
+/**
+ * Harness controller — REST handlers for `/api/harness` (web setup page).
+ *
+ * Contract: specs/onboarding-harness-login.md. Every response is
+ * `{ success: true, data }` or `{ success: false, error }`.
+ *
+ * Owner-only: install, orc choice, every login route and the API-key route
+ * refuse a request that carries an `X-Agent-Session` header (403) — an agent
+ * must not install software, switch the orchestrator's harness or log the
+ * machine in. This mirrors the tickets controller's owner check. `GET
+ * /api/harness` and `GET /api/harness/install/:jobId` stay readable.
+ *
+ * API keys are never echoed; errors never contain them.
+ *
+ * @module controllers/harness/harness.controller
+ */
+import { readAgentSessionHeader } from '../../utils/agent-caller.utils.js';
+import { HarnessApiKeyError } from '../../services/harness/harness-api-key.service.js';
+import { HarnessInstallError } from '../../services/harness/harness-install.service.js';
+import { UnknownHarnessError, getHarnessService } from '../../services/harness/harness.service.js';
+import { LoginBrokerError } from '../../services/harness/login-broker.service.js';
+/** HTTP status for each service error code. */
+const ERROR_STATUS = {
+    unknown_harness: 404,
+    job_not_found: 404,
+    not_found: 404,
+    unsupported_method: 400,
+    unsupported: 400,
+    invalid_key: 400,
+    not_installed: 409,
+    not_active: 409,
+    login_failed: 422,
+    spawn_failed: 500,
+};
+/**
+ * Refuse a request made by an agent session.
+ *
+ * @param req - Express request
+ * @param res - Express response
+ * @param what - Action, for the message
+ * @returns True when refused (response sent)
+ */
+export function refuseAgent(req, res, what) {
+    if (!readAgentSessionHeader(req))
+        return false;
+    res.status(403).json({ success: false, error: `Only the owner can ${what}` });
+    return true;
+}
+/**
+ * Send an error response for a thrown error.
+ *
+ * @param res - Express response
+ * @param error - Thrown value
+ */
+export function sendError(res, error) {
+    if (error instanceof UnknownHarnessError) {
+        res.status(404).json({ success: false, error: error.message });
+        return;
+    }
+    if (error instanceof LoginBrokerError || error instanceof HarnessInstallError || error instanceof HarnessApiKeyError) {
+        res.status(ERROR_STATUS[error.code] ?? 500).json({ success: false, error: error.message, code: error.code });
+        return;
+    }
+    res.status(500).json({ success: false, error: error instanceof Error ? error.message : 'Internal error' });
+}
+/**
+ * Read a string route param.
+ *
+ * @param req - Express request
+ * @param name - Param name
+ * @returns The value ('' when missing)
+ */
+function param(req, name) {
+    const value = req.params[name];
+    return typeof value === 'string' ? value : '';
+}
+/**
+ * Build the controller.
+ *
+ * @param getService - Service accessor (defaults to the backend singleton; resolved per request)
+ * @returns Handlers
+ */
+export function createHarnessController(getService = getHarnessService) {
+    return {
+        /** GET / — statuses, orc harness, system tools */
+        async getOverview(_req, res) {
+            try {
+                res.json({ success: true, data: await getService().getOverview() });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** POST /:id/install — start an install job */
+        async startInstall(req, res) {
+            if (refuseAgent(req, res, 'install harnesses'))
+                return;
+            try {
+                const job = getService().startInstall(param(req, 'id'));
+                res.json({ success: true, data: { jobId: job.jobId } });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** GET /install/:jobId — install job progress */
+        async getInstallJob(req, res) {
+            try {
+                res.json({ success: true, data: getService().getInstallJob(param(req, 'jobId')) });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** PUT /orc — choose the orchestrator's harness */
+        async setOrcHarness(req, res) {
+            if (refuseAgent(req, res, 'choose the orchestrator harness'))
+                return;
+            const harnessId = req.body?.harnessId;
+            if (typeof harnessId !== 'string' || harnessId.length === 0) {
+                res.status(400).json({ success: false, error: 'harnessId is required' });
+                return;
+            }
+            try {
+                const orcHarness = await getService().setOrcHarness(harnessId);
+                res.json({ success: true, data: { orcHarness } });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** POST /:id/login — start a broker login */
+        async startLogin(req, res) {
+            if (refuseAgent(req, res, 'log harnesses in'))
+                return;
+            const method = req.body?.method;
+            if (typeof method !== 'string' || method.length === 0) {
+                res.status(400).json({ success: false, error: 'method is required' });
+                return;
+            }
+            try {
+                res.json({ success: true, data: getService().startLogin(param(req, 'id'), method) });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** GET /login/:sessionId — login session state */
+        async getLogin(req, res) {
+            if (refuseAgent(req, res, 'read harness logins'))
+                return;
+            try {
+                res.json({ success: true, data: getService().broker.get(param(req, 'sessionId')) });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** POST /login/:sessionId/input — type the user's reply */
+        async inputLogin(req, res) {
+            if (refuseAgent(req, res, 'log harnesses in'))
+                return;
+            const text = req.body?.text;
+            if (typeof text !== 'string' || text.trim().length === 0) {
+                res.status(400).json({ success: false, error: 'text is required' });
+                return;
+            }
+            try {
+                res.json({ success: true, data: getService().broker.input(param(req, 'sessionId'), text.trim()) });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** POST /login/:sessionId/cancel — cancel a login */
+        async cancelLogin(req, res) {
+            if (refuseAgent(req, res, 'cancel harness logins'))
+                return;
+            try {
+                res.json({ success: true, data: getService().broker.cancel(param(req, 'sessionId')) });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+        /** POST /:id/api-key — validate and store an API key (never echoed) */
+        async submitApiKey(req, res) {
+            if (refuseAgent(req, res, 'set harness API keys'))
+                return;
+            const key = req.body?.key;
+            if (typeof key !== 'string' || key.trim().length === 0) {
+                res.status(400).json({ success: false, error: 'key is required' });
+                return;
+            }
+            try {
+                res.json({ success: true, data: await getService().submitApiKey(param(req, 'id'), key) });
+            }
+            catch (error) {
+                sendError(res, error);
+            }
+        },
+    };
+}
+//# sourceMappingURL=harness.controller.js.map

package/dist/backend/backend/src/controllers/harness/harness.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.controller.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/harness/harness.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mDAAmD,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AACxF,OAAO,EAAkB,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AACnH,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAElF,+CAA+C;AAC/C,MAAM,YAAY,GAA2B;IAC5C,eAAe,EAAE,GAAG;IACpB,aAAa,EAAE,GAAG;IAClB,SAAS,EAAE,GAAG;IACd,kBAAkB,EAAE,GAAG;IACvB,WAAW,EAAE,GAAG;IAChB,WAAW,EAAE,GAAG;IAChB,aAAa,EAAE,GAAG;IAClB,UAAU,EAAE,GAAG;IACf,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,GAAG;CACjB,CAAC;AAeF;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAY;IACpE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAa,EAAE,KAAc;IACtD,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QAC1C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO;IACR,CAAC;IACD,IAAI,KAAK,YAAY,gBAAgB,IAAI,KAAK,YAAY,mBAAmB,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;QACtH,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7G,OAAO;IACR,CAAC;IACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED;;;;;;GAMG;AACH,SAAS,KAAK,CAAC,GAAY,EAAE,IAAY;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,aAAmC,iBAAiB;IAC3F,OAAO;QACN,kDAAkD;QAClD,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG;YAC1B,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,UAAU,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,+CAA+C;QAC/C,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG;YAC1B,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,CAAC;gBAAE,OAAO;YACvD,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,iDAAiD;QACjD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;YAC3B,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,mDAAmD;QACnD,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG;YAC3B,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,CAAC;gBAAE,OAAO;YACrE,MAAM,SAAS,GAAI,GAAG,CAAC,IAA4C,EAAE,SAAS,CAAC;YAC/E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACzE,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,MAAM,UAAU,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,6CAA6C;QAC7C,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG;YACxB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC;gBAAE,OAAO;YACtD,MAAM,MAAM,GAAI,GAAG,CAAC,IAAyC,EAAE,MAAM,CAAC;YACtE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBACtE,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,kDAAkD;QAClD,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG;YACtB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,CAAC;gBAAE,OAAO;YACzD,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,2DAA2D;QAC3D,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG;YACxB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,kBAAkB,CAAC;gBAAE,OAAO;YACtD,MAAM,IAAI,GAAI,GAAG,CAAC,IAAuC,EAAE,IAAI,CAAC;YAChE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACpE,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACpG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,qDAAqD;QACrD,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG;YACzB,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,uBAAuB,CAAC;gBAAE,OAAO;YAC3D,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QAED,uEAAuE;QACvE,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG;YAC1B,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC;gBAAE,OAAO;YAC1D,MAAM,GAAG,GAAI,GAAG,CAAC,IAAsC,EAAE,GAAG,CAAC;YAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACnE,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,UAAU,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/backend/backend/src/controllers/harness/harness.routes.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Harness routes — mounted at `/api/harness` (specs/onboarding-harness-login.md).
+ *
+ * @module controllers/harness/harness.routes
+ */
+import { Router } from 'express';
+import type { HarnessService } from '../../services/harness/harness.service.js';
+/**
+ * Create the harness router.
+ *
+ * Routes (static paths are registered before `/:id/...` so they never match as ids):
+ * - GET  /                          — statuses, orc harness, system tools
+ * - GET  /install/:jobId            — install job progress
+ * - PUT  /orc                       — choose the orchestrator harness { harnessId }
+ * - POST /orc                       — the same, for the relay (portal / phone carry GET and POST only)
+ * - GET  /login/:sessionId          — login session
+ * - POST /login/:sessionId/input    — type the user's reply { text }
+ * - POST /login/:sessionId/cancel   — cancel a login
+ * - POST /:id/install               — start an install job
+ * - POST /:id/login                 — start a broker login { method }
+ * - POST /:id/api-key               — store an API key { key }
+ *
+ * @param getService - Service accessor (tests inject a fake)
+ * @returns Express router for /api/harness
+ */
+export declare function createHarnessRouter(getService?: () => HarnessService): Router;
+//# sourceMappingURL=harness.routes.d.ts.map

package/dist/backend/backend/src/controllers/harness/harness.routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.routes.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/harness/harness.routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2CAA2C,CAAC;AAIhF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,GAAE,MAAM,cAAkC,GAAG,MAAM,CAehG"}

package/dist/backend/backend/src/controllers/harness/harness.routes.js

@@ -0,0 +1,43 @@
+/**
+ * Harness routes — mounted at `/api/harness` (specs/onboarding-harness-login.md).
+ *
+ * @module controllers/harness/harness.routes
+ */
+import { Router } from 'express';
+import { getHarnessService } from '../../services/harness/harness.service.js';
+import { createHarnessController } from './harness.controller.js';
+/**
+ * Create the harness router.
+ *
+ * Routes (static paths are registered before `/:id/...` so they never match as ids):
+ * - GET  /                          — statuses, orc harness, system tools
+ * - GET  /install/:jobId            — install job progress
+ * - PUT  /orc                       — choose the orchestrator harness { harnessId }
+ * - POST /orc                       — the same, for the relay (portal / phone carry GET and POST only)
+ * - GET  /login/:sessionId          — login session
+ * - POST /login/:sessionId/input    — type the user's reply { text }
+ * - POST /login/:sessionId/cancel   — cancel a login
+ * - POST /:id/install               — start an install job
+ * - POST /:id/login                 — start a broker login { method }
+ * - POST /:id/api-key               — store an API key { key }
+ *
+ * @param getService - Service accessor (tests inject a fake)
+ * @returns Express router for /api/harness
+ */
+export function createHarnessRouter(getService = getHarnessService) {
+    const router = Router();
+    const controller = createHarnessController(getService);
+    router.get('/', controller.getOverview);
+    router.get('/install/:jobId', controller.getInstallJob);
+    router.put('/orc', controller.setOrcHarness);
+    // POST twin: the relay (portal / phone) only carries GET and POST.
+    router.post('/orc', controller.setOrcHarness);
+    router.get('/login/:sessionId', controller.getLogin);
+    router.post('/login/:sessionId/input', controller.inputLogin);
+    router.post('/login/:sessionId/cancel', controller.cancelLogin);
+    router.post('/:id/install', controller.startInstall);
+    router.post('/:id/login', controller.startLogin);
+    router.post('/:id/api-key', controller.submitApiKey);
+    return router;
+}
+//# sourceMappingURL=harness.routes.js.map

package/dist/backend/backend/src/controllers/harness/harness.routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.routes.js","sourceRoot":"","sources":["../../../../../../backend/src/controllers/harness/harness.routes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,aAAmC,iBAAiB;IACtF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7C,mEAAmE;IACnE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/backend/backend/src/controllers/whatsapp/whatsapp-inbox.controller.d.ts

@@ -0,0 +1,73 @@
+/**
+ * WhatsApp Inbox Controller
+ *
+ * Read API and reply drafts for the WhatsApp inbox connector, mounted under
+ * `/api/whatsapp`:
+ *
+ * | Method | Path                        | Who            |
+ * |--------|-----------------------------|----------------|
+ * | GET    | /inbox?limit=&includeGroups=| owner, agents  |
+ * | GET    | /chats?limit=&q=            | owner, agents  |
+ * | GET    | /chats/:chatId/messages     | owner, agents  |
+ * | GET    | /search?q=&limit=           | owner, agents  |
+ * | POST   | /drafts {chatId, text}      | owner, agents  |
+ * | GET    | /drafts?status=&limit=      | owner, agents  |
+ * | POST   | /drafts/:id/discard         | owner, agents  |
+ * | POST   | /drafts/:id/send            | owner; agents only with the owner's 「发 <code>」 |
+ *
+ * Every response is `{ success, data }` or `{ success: false, error, code }`.
+ * The send gate is in `services/whatsapp/whatsapp-draft-gate.ts`.
+ *
+ * @module controllers/whatsapp/whatsapp-inbox
+ */
+import { Router, Request } from 'express';
+import { type WhatsAppInboxStore } from '../../services/whatsapp/whatsapp-inbox.store.js';
+import type { WhatsAppOutgoingMessage } from '../../types/whatsapp.types.js';
+/** The slice of WhatsAppService the inbox routes use. */
+export interface WhatsAppInboxSender {
+    /** Whether the socket is connected */
+    isConnected(): boolean;
+    /** Send one text message */
+    sendMessage(msg: WhatsAppOutgoingMessage): Promise<void>;
+}
+/** Injectable dependencies (tests pass fakes). */
+export interface WhatsAppInboxDeps {
+    /** Inbox store */
+    getStore: () => WhatsAppInboxStore;
+    /** Socket sender */
+    getSender: () => WhatsAppInboxSender;
+    /** Genuine owner chat messages created at/after `sinceMs`, newest first */
+    getOwnerMessagesSince: (sinceMs: number, limit: number) => string[];
+    /** Clock */
+    now: () => number;
+    /**
+     * Whether a request with no X-Agent-Session really is the owner: it must
+     * carry the API token (dashboard; the portal / phone relay adds it). An
+     * agent leaving out its session header is not the owner.
+     */
+    isOwnerRequest: (req: Request) => boolean;
+}
+/**
+ * Parse a `limit` query value, clamped to `[1, max]`.
+ *
+ * @param raw - Query value
+ * @param def - Default when absent/invalid
+ * @param max - Hard cap
+ * @returns The limit
+ */
+export declare function parseLimit(raw: unknown, def: number, max: number): number;
+/**
+ * Parse a boolean query flag (`true`/`1`/`yes`).
+ *
+ * @param raw - Query value
+ * @returns True only for an explicit truthy value
+ */
+export declare function parseFlag(raw: unknown): boolean;
+/**
+ * Create the inbox router.
+ *
+ * @param overrides - Dependency overrides (tests)
+ * @returns Router to mount under `/api/whatsapp`
+ */
+export declare function createWhatsAppInboxRouter(overrides?: Partial<WhatsAppInboxDeps>): Router;
+//# sourceMappingURL=whatsapp-inbox.controller.d.ts.map

package/dist/backend/backend/src/controllers/whatsapp/whatsapp-inbox.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"whatsapp-inbox.controller.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/controllers/whatsapp/whatsapp-inbox.controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,MAAM,EAAE,OAAO,EAA0B,MAAM,SAAS,CAAC;AAIlE,OAAO,EAAyB,KAAK,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AAQjH,OAAO,KAAK,EAAsC,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAIjH,yDAAyD;AACzD,MAAM,WAAW,mBAAmB;IAClC,sCAAsC;IACtC,WAAW,IAAI,OAAO,CAAC;IACvB,4BAA4B;IAC5B,WAAW,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAED,kDAAkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,kBAAkB;IAClB,QAAQ,EAAE,MAAM,kBAAkB,CAAC;IACnC,oBAAoB;IACpB,SAAS,EAAE,MAAM,mBAAmB,CAAC;IACrC,2EAA2E;IAC3E,qBAAqB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACpE,YAAY;IACZ,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB;;;;OAIG;IACH,cAAc,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;CAC3C;AAWD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAIzE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE/C;AAyBD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,MAAM,CA4N5F"}