daemora 1.0.0-alpha.0

package/dist/server/middleware/security.js

@@ -0,0 +1,171 @@
+/**
+ * Security middleware — headers + CORS + rate limit + exponential backoff.
+ *
+ * Headers (applied to every response):
+ *   X-Content-Type-Options   : nosniff
+ *   X-Frame-Options          : DENY
+ *   Referrer-Policy          : no-referrer
+ *   Content-Security-Policy  : tight — only self + data: images + inline
+ *                              styles (the UI bundles inline styles).
+ *                              Script-src is 'self' only — no eval, no CDN.
+ *   Strict-Transport-Security: max-age=31536000; includeSubDomains
+ *                              (only emitted when the request arrived
+ *                              over HTTPS, via X-Forwarded-Proto or the
+ *                              socket's tls flag — never asserted on
+ *                              plain http to avoid breaking loopback)
+ *
+ * CORS (for /api/* and /auth/*):
+ *   - Same-origin + loopback by default
+ *   - Additional allowed origins via `CORS_ALLOW_ORIGINS` (comma list)
+ *   - Credentials: true (needed for httpOnly refresh cookie)
+ *   - OPTIONS preflight: 204 with the allow-* headers
+ *
+ * Rate limit (per IP):
+ *   - Exposed as a middleware factory: `rateLimit({ max, windowMs })`
+ *   - Exponential backoff variant for /auth/login specifically: after
+ *     N consecutive failures from the same IP, reject with 429 and a
+ *     Retry-After header for 2^N seconds (capped at 1h).
+ */
+// ── Security headers ───────────────────────────────────────────────────────
+function buildCsp(extraConnectSrc) {
+    const connect = ["'self'", ...extraConnectSrc].filter(Boolean).join(" ");
+    const media = ["'self'", "blob:", ...extraConnectSrc].filter(Boolean).join(" ");
+    return [
+        "default-src 'self'",
+        "script-src 'self'",
+        // UI bundle (Vite React) ships some inline styles. `'unsafe-inline'`
+        // for styles alone is the industry-common trade-off — inline styles
+        // can't exfiltrate data the way inline scripts can.
+        "style-src 'self' 'unsafe-inline'",
+        "img-src 'self' data: blob:",
+        "font-src 'self' data:",
+        `connect-src ${connect}`,
+        `media-src ${media}`,
+        "object-src 'none'",
+        "base-uri 'self'",
+        "frame-ancestors 'none'",
+    ].join("; ");
+}
+/**
+ * Default security headers middleware (for callers that don't need
+ * dynamic CSP). Retained as a convenience; production code goes
+ * through `createSecurityHeaders` so runtime values like LIVEKIT_URL
+ * can be reflected in the CSP.
+ */
+export function securityHeaders(req, res, next) {
+    res.setHeader("X-Content-Type-Options", "nosniff");
+    res.setHeader("X-Frame-Options", "DENY");
+    res.setHeader("Referrer-Policy", "no-referrer");
+    res.setHeader("Content-Security-Policy", buildCsp([]));
+    const proto = req.headers["x-forwarded-proto"];
+    if (proto === "https" || req.socket.encrypted === true) {
+        res.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
+    }
+    next();
+}
+export function createSecurityHeaders(opts = {}) {
+    return (req, res, next) => {
+        res.setHeader("X-Content-Type-Options", "nosniff");
+        res.setHeader("X-Frame-Options", "DENY");
+        res.setHeader("Referrer-Policy", "no-referrer");
+        const extras = opts.extraConnectOrigins ? opts.extraConnectOrigins() : [];
+        res.setHeader("Content-Security-Policy", buildCsp(extras));
+        const proto = req.headers["x-forwarded-proto"];
+        if (proto === "https" || req.socket.encrypted === true) {
+            res.setHeader("Strict-Transport-Security", "max-age=31536000; includeSubDomains");
+        }
+        next();
+    };
+}
+export function cors(opts = {}) {
+    const explicit = new Set(opts.allowedOrigins ?? []);
+    return (req, res, next) => {
+        const origin = req.headers.origin;
+        if (typeof origin === "string") {
+            const url = safeParseUrl(origin);
+            const host = url?.hostname ?? "";
+            const isLocal = host === "127.0.0.1" || host === "localhost" || host === "::1";
+            if (explicit.has(origin) || isLocal) {
+                res.setHeader("Access-Control-Allow-Origin", origin);
+                res.setHeader("Access-Control-Allow-Credentials", "true");
+                res.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,PATCH,DELETE,OPTIONS");
+                res.setHeader("Access-Control-Allow-Headers", "Content-Type, Authorization, X-Auth-Token");
+                res.setHeader("Vary", "Origin");
+            }
+        }
+        if (req.method === "OPTIONS") {
+            res.status(204).end();
+            return;
+        }
+        next();
+    };
+}
+function safeParseUrl(s) {
+    try {
+        return new URL(s);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Fixed-window per-IP rate limit. In-memory; sufficient for a
+ * self-hosted single-process agent. Multi-instance deploys should
+ * swap this for Redis.
+ */
+export function rateLimit(opts) {
+    const buckets = new Map();
+    return (req, res, next) => {
+        const key = opts.keyFn?.(req) ?? (req.socket.remoteAddress ?? "unknown");
+        const now = Date.now();
+        let bucket = buckets.get(key);
+        if (!bucket || now > bucket.resetAt) {
+            bucket = { count: 0, resetAt: now + opts.windowMs };
+            buckets.set(key, bucket);
+        }
+        bucket.count++;
+        res.setHeader("X-RateLimit-Limit", String(opts.max));
+        res.setHeader("X-RateLimit-Remaining", String(Math.max(0, opts.max - bucket.count)));
+        if (bucket.count > opts.max) {
+            res.setHeader("Retry-After", String(Math.ceil((bucket.resetAt - now) / 1000)));
+            res.status(429).json({ error: "Too many requests", code: "rate_limited" });
+            return;
+        }
+        next();
+    };
+}
+const INITIAL_BACKOFF_SECONDS = 1;
+const MAX_BACKOFF_SECONDS = 60 * 60;
+export function loginBackoff() {
+    const state = new Map();
+    const keyOf = (req) => req.socket.remoteAddress ?? "unknown";
+    return {
+        middleware(req, res, next) {
+            const key = keyOf(req);
+            const entry = state.get(key);
+            if (!entry)
+                return next();
+            const now = Date.now();
+            if (entry.lockedUntil > now) {
+                res.setHeader("Retry-After", String(Math.ceil((entry.lockedUntil - now) / 1000)));
+                res.status(429).json({ error: "Too many failures. Try again later.", code: "login_locked" });
+                return;
+            }
+            next();
+        },
+        recordFailure(req, res) {
+            const key = keyOf(req);
+            const entry = state.get(key) ?? { failures: 0, lockedUntil: 0 };
+            entry.failures++;
+            const wait = Math.min(MAX_BACKOFF_SECONDS, INITIAL_BACKOFF_SECONDS * Math.pow(2, entry.failures - 1));
+            entry.lockedUntil = Date.now() + wait * 1000;
+            state.set(key, entry);
+            res.setHeader("Retry-After", String(wait));
+            res.status(401).json({ error: "Invalid credentials", code: "bad_credentials" });
+        },
+        recordSuccess(req) {
+            state.delete(keyOf(req));
+        },
+    };
+}
+//# sourceMappingURL=security.js.map

package/dist/server/middleware/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/server/middleware/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAIH,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,eAAkC;IAClD,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChF,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,qEAAqE;QACrE,oEAAoE;QACpE,oDAAoD;QACpD,kCAAkC;QAClC,4BAA4B;QAC5B,uBAAuB;QACvB,eAAe,OAAO,EAAE;QACxB,aAAa,KAAK,EAAE;QACpB,mBAAmB;QACnB,iBAAiB;QACjB,wBAAwB;KACzB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC7E,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACnD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IACzC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;IAChD,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,OAAO,IAAK,GAAG,CAAC,MAA6C,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC/F,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,EAAE,CAAC;AACT,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA4B,EAAE;IAClE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QACnD,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,OAAO,IAAK,GAAG,CAAC,MAA6C,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC/F,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,qCAAqC,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AASD,MAAM,UAAU,IAAI,CAAC,OAAiB,EAAE;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,CAAC;YAC/E,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;gBAC1D,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,mCAAmC,CAAC,CAAC;gBACnF,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,2CAA2C,CAAC,CAAC;gBAC3F,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACnD,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAmB;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5B,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAuBD,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,CAAC;AAEpC,MAAM,UAAU,YAAY;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqD,CAAC;IAE3E,MAAM,KAAK,GAAG,CAAC,GAAY,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;IAE9E,OAAO;QACL,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI;YACvB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,KAAK,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;gBAC7F,OAAO;YACT,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC;QACD,aAAa,CAAC,GAAG,EAAE,GAAG;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;YAChE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,uBAAuB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC;YACtG,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YAC7C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACtB,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,aAAa,CAAC,GAAG;YACf,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/routes/auth.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Auth routes — vault unlock/lock only. No JWT sessions.
+ *
+ *   POST /auth/login    { passphrase } → { unlocked: true }
+ *                       Unlocks the vault for the remainder of this
+ *                       process's lifetime. On invalid passphrase,
+ *                       responds 401 with rate-limit backoff.
+ *
+ *   POST /auth/logout   Locks the vault. Any subsequent call that
+ *                       needs a secret returns 423 until unlock.
+ *
+ *   GET  /auth/session  → { unlocked, exists, loopback }
+ *                       The UI checks this on boot to decide whether
+ *                       to render the unlock modal or the app proper.
+ *
+ * Daemora is single-tenant. There are no user accounts, no refresh
+ * tokens, no session rotation. The only credential is the machine's
+ * vault passphrase; once supplied, the vault stays unlocked until the
+ * process ends (or you POST /auth/logout).
+ */
+import type { Express } from "express";
+import type { Auth } from "../../auth/index.js";
+export declare function mountAuthRoutes(app: Express, auth: Auth): void;
+//# sourceMappingURL=auth.d.ts.map

package/dist/server/routes/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/routes/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAGhD,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAyC9D"}

package/dist/server/routes/auth.js

@@ -0,0 +1,65 @@
+/**
+ * Auth routes — vault unlock/lock only. No JWT sessions.
+ *
+ *   POST /auth/login    { passphrase } → { unlocked: true }
+ *                       Unlocks the vault for the remainder of this
+ *                       process's lifetime. On invalid passphrase,
+ *                       responds 401 with rate-limit backoff.
+ *
+ *   POST /auth/logout   Locks the vault. Any subsequent call that
+ *                       needs a secret returns 423 until unlock.
+ *
+ *   GET  /auth/session  → { unlocked, exists, loopback }
+ *                       The UI checks this on boot to decide whether
+ *                       to render the unlock modal or the app proper.
+ *
+ * Daemora is single-tenant. There are no user accounts, no refresh
+ * tokens, no session rotation. The only credential is the machine's
+ * vault passphrase; once supplied, the vault stays unlocked until the
+ * process ends (or you POST /auth/logout).
+ */
+import { loginBackoff, rateLimit } from "../middleware/security.js";
+export function mountAuthRoutes(app, auth) {
+    const backoff = loginBackoff();
+    const loginLimit = rateLimit({ max: 20, windowMs: 60_000 });
+    app.post("/auth/login", loginLimit, backoff.middleware, async (req, res) => {
+        const body = (req.body ?? {});
+        const passphrase = typeof body.passphrase === "string" ? body.passphrase : "";
+        if (!passphrase)
+            return backoff.recordFailure(req, res);
+        try {
+            const user = await auth.provider.verifyCredentials({ passphrase });
+            if (!user) {
+                auth.store.audit({ userId: "unknown", event: "login.fail", ip: peerIp(req) });
+                return backoff.recordFailure(req, res);
+            }
+            backoff.recordSuccess(req);
+            auth.store.audit({ userId: user.id, event: "login.ok", ip: peerIp(req) });
+            res.json({ unlocked: true });
+        }
+        catch (e) {
+            auth.store.audit({ userId: "unknown", event: "login.fail", ip: peerIp(req), detail: e.message });
+            backoff.recordFailure(req, res);
+        }
+    });
+    app.post("/auth/logout", (req, res) => {
+        // Vault stays unlocked for the lifetime of the process — locking
+        // it here would break the background token refresher and force
+        // every channel/integration to redo OAuth on the next call. We
+        // still record the audit event so a future "clear browser session
+        // only" semantic stays observable.
+        auth.store.audit({ userId: "local", event: "logout", ip: peerIp(req) });
+        res.json({ ok: true });
+    });
+    app.get("/auth/session", (req, res) => {
+        res.json({
+            unlocked: auth.provider.isUnlocked(),
+            exists: auth.provider.exists(),
+            loopback: req.auth?.loopback ?? false,
+        });
+    });
+}
+function peerIp(req) {
+    return req.socket.remoteAddress ?? "unknown";
+}
+//# sourceMappingURL=auth.js.map

package/dist/server/routes/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/server/routes/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEpE,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,IAAU;IACtD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE5D,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6B,CAAC;QAC1D,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,UAAU;YAAE,OAAO,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9E,OAAO,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5G,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,iEAAiE;QACjE,+DAA+D;QAC/D,+DAA+D;QAC/D,kEAAkE;QAClE,mCAAmC;QACnC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACvD,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;YACpC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC9B,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,KAAK;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,GAAY;IAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;AAC/C,CAAC"}

package/dist/server/routes/channels.d.ts

@@ -0,0 +1,7 @@
+/**
+ * /api/channels — list, status, start/stop, config.
+ */
+import type { Express } from "express";
+import type { ServerDeps } from "../index.js";
+export declare function mountChannelRoutes(app: Express, deps: ServerDeps): void;
+//# sourceMappingURL=channels.d.ts.map

package/dist/server/routes/channels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.d.ts","sourceRoot":"","sources":["../../../src/server/routes/channels.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAuFvE"}

package/dist/server/routes/channels.js

@@ -0,0 +1,90 @@
+/**
+ * /api/channels — list, status, start/stop, config.
+ */
+export function mountChannelRoutes(app, deps) {
+    app.get("/api/channels", (_req, res) => {
+        const status = deps.channels.list();
+        const running = deps.channelManager.runningSet();
+        const defs = deps.channels.defs();
+        const defById = new Map(defs.map((d) => [d.id, d]));
+        res.json({
+            channels: status.map((s) => {
+                const def = defById.get(s.id);
+                return {
+                    ...s,
+                    running: running.has(s.id),
+                    description: def?.description ?? "",
+                    icon: def?.icon ?? "",
+                    implemented: def?.implemented ?? false,
+                    requiredKeys: def?.requiredKeys ?? [],
+                };
+            }),
+        });
+    });
+    app.get("/api/channels/defs", (_req, res) => {
+        res.json({ defs: deps.channels.defs() });
+    });
+    app.get("/api/channels/:id", (req, res) => {
+        const id = req.params.id ?? "";
+        const def = deps.channels.defs().find((d) => d.id === id);
+        if (!def)
+            return res.status(404).json({ error: "channel not found" });
+        const running = deps.channelManager.runningSet().has(id);
+        res.json({ def, running });
+    });
+    app.post("/api/channels/:id/start", async (req, res) => {
+        const id = req.params.id ?? "";
+        // Use targeted start(id) — startAll() would iterate every def and
+        // factory-create duplicate instances of channels that are already
+        // running, causing e.g. Telegram 409 "Conflict: terminated by other
+        // getUpdates request" when the same bot token is polled twice.
+        const started = await deps.channelManager.start(id);
+        if (!started) {
+            return res.status(400).json({
+                error: "channel not startable — missing config or not implemented",
+            });
+        }
+        res.json({ ok: true, running: deps.channelManager.runningSet().has(id) });
+    });
+    app.post("/api/channels/:id/stop", async (req, res) => {
+        const id = req.params.id ?? "";
+        const stopped = await deps.channelManager.stop(id);
+        if (!stopped)
+            return res.status(404).json({ error: "channel not running" });
+        res.json({ ok: true });
+    });
+    app.post("/api/channels/reload", async (_req, res) => {
+        await deps.channelManager.stopAll();
+        await deps.channelManager.startAll();
+        res.json({ ok: true, running: Array.from(deps.channelManager.runningSet()) });
+    });
+    /**
+     * Remove a channel's configuration: stop it if running, then wipe
+     * every declared secret key from the vault. The channel def itself
+     * stays available in the registry so the user can reconfigure later.
+     */
+    app.delete("/api/channels/:id", async (req, res) => {
+        const id = req.params.id ?? "";
+        const def = deps.channels.defs().find((d) => d.id === id);
+        if (!def)
+            return res.status(404).json({ error: "channel not found" });
+        if (deps.channelManager.runningSet().has(id)) {
+            try {
+                await deps.channelManager.stop(id);
+            }
+            catch { }
+        }
+        const cleared = [];
+        if (deps.cfg.vault.isUnlocked()) {
+            for (const rk of def.requiredKeys ?? []) {
+                const key = rk.key;
+                if (deps.cfg.vault.has(key)) {
+                    deps.cfg.vault.delete(key);
+                    cleared.push(key);
+                }
+            }
+        }
+        res.json({ ok: true, cleared, vaultLocked: !deps.cfg.vault.isUnlocked() });
+    });
+}
+//# sourceMappingURL=channels.js.map

package/dist/server/routes/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","sourceRoot":"","sources":["../../../src/server/routes/channels.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,IAAgB;IAC/D,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9B,OAAO;oBACL,GAAG,CAAC;oBACJ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1B,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE;oBACnC,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE;oBACrB,WAAW,EAAE,GAAG,EAAE,WAAW,IAAI,KAAK;oBACtC,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,EAAE;iBACtC,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3D,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACxE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,+DAA+D;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,2DAA2D;aACnE,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACvE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,GAAG,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACpE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAEtE,IAAI,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YAChC,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;gBACnB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC;QACH,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/chat.d.ts

@@ -0,0 +1,19 @@
+/**
+ * /api/chat + /api/tasks/:id/stream — task-based chat matching the
+ * daemora-ui flow:
+ *
+ *   1. POST /api/chat  { input, sessionId }  →  { taskId }
+ *   2. GET  /api/tasks/:id/stream            →  EventSource (SSE)
+ *
+ * Events the UI listens for:
+ *   task:state    { status, result?, error? }
+ *   model:called  { iteration }
+ *   text:delta    { delta }
+ *   tool:before   { tool_name, params }
+ *   tool:after    { tool_name, duration?, error? }
+ *   agent:spawned { role }
+ */
+import type { Express } from "express";
+import type { ServerDeps } from "../index.js";
+export declare function mountChatRoutes(app: Express, deps: ServerDeps): void;
+//# sourceMappingURL=chat.d.ts.map

package/dist/server/routes/chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.d.ts","sourceRoot":"","sources":["../../../src/server/routes/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAK1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwC9C,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CA6HpE"}

package/dist/server/routes/chat.js

@@ -0,0 +1,209 @@
+/**
+ * /api/chat + /api/tasks/:id/stream — task-based chat matching the
+ * daemora-ui flow:
+ *
+ *   1. POST /api/chat  { input, sessionId }  →  { taskId }
+ *   2. GET  /api/tasks/:id/stream            →  EventSource (SSE)
+ *
+ * Events the UI listens for:
+ *   task:state    { status, result?, error? }
+ *   model:called  { iteration }
+ *   text:delta    { delta }
+ *   tool:before   { tool_name, params }
+ *   tool:after    { tool_name, duration?, error? }
+ *   agent:spawned { role }
+ */
+import { EventEmitter } from "node:events";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { join, extname } from "node:path";
+import { z } from "zod";
+import { ValidationError } from "../../util/errors.js";
+import { createLogger } from "../../util/logger.js";
+const log = createLogger("chat");
+/**
+ * Inline attachment sent with a chat turn. Binary payload is base64 so
+ * the existing JSON endpoint keeps working (the UI upload path pre-
+ * encodes with FileReader). 25 MB raw cap per file — enough for voice
+ * notes and screenshots, short of overloading model context.
+ */
+const chatAttachment = z.object({
+    filename: z.string().min(1).max(255),
+    mimeType: z.string().min(1).max(128),
+    /** base64-encoded bytes. */
+    base64: z.string().min(1),
+    kind: z.enum(["image", "audio", "video", "document", "file"]).optional(),
+});
+const chatRequest = z.object({
+    input: z.string().min(1).max(50_000),
+    sessionId: z.string().min(1).max(200).optional(),
+    model: z.string().optional(),
+    // Voice turns set this to true so the agent knows to answer in
+    // short, spoken, markdown-free style instead of producing tables /
+    // code blocks the TTS would have to read literally.
+    voiceMode: z.boolean().optional(),
+    attachments: z.array(chatAttachment).max(10).optional(),
+});
+const activeTasks = new Map();
+export function mountChatRoutes(app, deps) {
+    app.post("/api/chat", (req, res) => {
+        const body = chatRequest.safeParse(req.body);
+        if (!body.success)
+            throw new ValidationError(body.error.message);
+        // Materialise any base64 attachments to the inbox directory so the
+        // AttachmentProcessor sees them as regular file paths. One-way: we
+        // never send these bytes back to the client.
+        const resolvedAttachments = (body.data.attachments ?? []).map((a) => {
+            const bytes = Buffer.from(a.base64, "base64");
+            const inbox = join(deps.cfg.env.dataDir, "inbox");
+            try {
+                mkdirSync(inbox, { recursive: true });
+            }
+            catch { /* already exists */ }
+            const safeName = a.filename.replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 120);
+            const ext = extname(safeName) || extFor(a.mimeType);
+            const saved = join(inbox, `${Date.now()}-${randomUUID().slice(0, 8)}${ext}`);
+            writeFileSync(saved, bytes);
+            const kind = a.kind ?? inferKind(a.mimeType);
+            return {
+                kind,
+                path: saved,
+                mimeType: a.mimeType,
+                filename: safeName,
+                size: bytes.byteLength,
+            };
+        });
+        // Use send() instead of run(): if a loop is already running on this
+        // session, the new input is enqueued in the pending queue and the
+        // running loop absorbs it at its next safe boundary (between turns).
+        // No parallel tasks per session — one continuous conversation.
+        // EventEmitter default listener cap is 10. Multiple SSE subscribers
+        // (e.g. browser tab + retry + dev-tools) attach `done` listeners to
+        // the same long-running task; bump the cap to silence the leak
+        // warning. We still cleanup in `req.on("close")`, so this is just
+        // headroom for legitimate concurrent subscribers, not unbounded.
+        const emitter = new EventEmitter();
+        emitter.setMaxListeners(64);
+        const sendResult = deps.runner.send({
+            input: body.data.input,
+            ...(body.data.sessionId ? { sessionId: body.data.sessionId } : {}),
+            ...(body.data.model ? { model: body.data.model } : {}),
+            ...(body.data.voiceMode ? { voiceMode: true } : {}),
+            ...(resolvedAttachments.length > 0 ? { attachments: resolvedAttachments } : {}),
+            onLocal: (event, data) => emitter.emit("sse", event, data),
+        });
+        if (sendResult.mode === "injected") {
+            // Loop already running on this session — input is queued. Tell the
+            // client to subscribe to the existing task's SSE stream so it sees
+            // the agent's response to the injected input as it arrives.
+            res.json({ taskId: sendResult.taskId, sessionId: sendResult.sessionId, mode: "injected" });
+            return;
+        }
+        // mode === "fresh" → new loop spawned for this session.
+        const tracked = {
+            id: sendResult.taskId,
+            sessionId: sendResult.sessionId,
+            emitter,
+            status: "pending",
+        };
+        activeTasks.set(sendResult.taskId, tracked);
+        res.json({ taskId: sendResult.taskId, sessionId: sendResult.sessionId, mode: "fresh" });
+        sendResult.done
+            .then((terminal) => {
+            tracked.status = terminal.status;
+            if (terminal.result !== undefined)
+                tracked.result = terminal.result;
+            if (terminal.error !== undefined)
+                tracked.error = terminal.error;
+            emitter.emit("done");
+        })
+            .catch((e) => {
+            tracked.status = "failed";
+            tracked.error = e.message ?? String(e);
+            log.error({ taskId: sendResult.taskId, err: tracked.error }, "task crashed");
+            emitter.emit("done");
+        })
+            .finally(() => {
+            setTimeout(() => activeTasks.delete(sendResult.taskId), 60_000).unref();
+        });
+    });
+    app.get("/api/tasks/:id/stream", (req, res) => {
+        const taskId = req.params.id;
+        if (!taskId)
+            throw new ValidationError("Missing task id");
+        const task = activeTasks.get(taskId);
+        if (!task) {
+            res.writeHead(200, sseHeaders());
+            sendSSE(res, "task:state", {
+                status: "completed",
+                result: "(task not found or already finished)",
+            });
+            res.end();
+            return;
+        }
+        res.writeHead(200, sseHeaders());
+        if (task.status === "completed" || task.status === "failed") {
+            sendSSE(res, "task:state", {
+                status: task.status,
+                ...(task.result ? { result: task.result } : {}),
+                ...(task.error ? { error: task.error } : {}),
+            });
+            res.end();
+            return;
+        }
+        const onEvent = (event, data) => sendSSE(res, event, data);
+        task.emitter.on("sse", onEvent);
+        const cleanup = () => task.emitter.off("sse", onEvent);
+        req.on("close", cleanup);
+        task.emitter.once("done", () => {
+            cleanup();
+            res.end();
+        });
+    });
+    app.get("/api/sessions/:id/stream", (req, res) => {
+        res.writeHead(200, sseHeaders());
+        req.on("close", () => res.end());
+    });
+}
+function sseHeaders() {
+    return {
+        "Content-Type": "text/event-stream",
+        "Cache-Control": "no-cache, no-transform",
+        Connection: "keep-alive",
+    };
+}
+function sendSSE(res, event, data) {
+    res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
+}
+function inferKind(mime) {
+    if (mime.startsWith("image/"))
+        return "image";
+    if (mime.startsWith("audio/"))
+        return "audio";
+    if (mime.startsWith("video/"))
+        return "video";
+    if (mime === "application/pdf" ||
+        mime.includes("officedocument") ||
+        mime === "application/msword" ||
+        mime === "application/vnd.ms-excel") {
+        return "document";
+    }
+    return "file";
+}
+function extFor(mime) {
+    const map = {
+        "image/png": ".png",
+        "image/jpeg": ".jpg",
+        "image/gif": ".gif",
+        "image/webp": ".webp",
+        "audio/ogg": ".ogg",
+        "audio/mpeg": ".mp3",
+        "audio/wav": ".wav",
+        "audio/mp4": ".m4a",
+        "audio/webm": ".webm",
+        "video/mp4": ".mp4",
+        "application/pdf": ".pdf",
+    };
+    return map[mime] ?? "";
+}
+//# sourceMappingURL=chat.js.map

package/dist/server/routes/chat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat.js","sourceRoot":"","sources":["../../../src/server/routes/chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpC,4BAA4B;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,+DAA+D;IAC/D,mEAAmE;IACnE,oDAAoD;IACpD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC,CAAC;AAWH,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEnD,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,IAAgB;IAC5D,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjE,mEAAmE;QACnE,mEAAmE;QACnE,6CAA6C;QAC7C,MAAM,mBAAmB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAClE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,CAAC;gBAAC,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAC7E,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3E,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;YAC7E,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO;gBACL,IAAI;gBACJ,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,KAAK,CAAC,UAAU;aACd,CAAC;QACb,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D;QAC/D,oEAAoE;QACpE,oEAAoE;QACpE,+DAA+D;QAC/D,kEAAkE;QAClE,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,YAAY,EAAE,CAAC;QACnC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;SAC3D,CAAC,CAAC;QAEH,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACnC,mEAAmE;YACnE,mEAAmE;YACnE,4DAA4D;YAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3F,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,MAAM,OAAO,GAAgB;YAC3B,EAAE,EAAE,UAAU,CAAC,MAAM;YACrB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,OAAO;YACP,MAAM,EAAE,SAAS;SAClB,CAAC;QACF,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAE5C,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAExF,UAAU,CAAC,IAAK;aACb,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACpE,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;YACpB,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC1B,OAAO,CAAC,KAAK,GAAI,CAAW,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;YAClD,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAC1E,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAErC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE;gBACzB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,sCAAsC;aAC/C,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QAEjC,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE;gBACzB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,IAAa,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAEhC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACvD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YAC7B,OAAO,EAAE,CAAC;YACV,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACjC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,OAAO;QACL,cAAc,EAAE,mBAAmB;QACnC,eAAe,EAAE,wBAAwB;QACzC,UAAU,EAAE,YAAY;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAa,EAAE,KAAa,EAAE,IAAa;IAC1D,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,IACE,IAAI,KAAK,iBAAiB;QAC1B,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC/B,IAAI,KAAK,oBAAoB;QAC7B,IAAI,KAAK,0BAA0B,EACnC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,MAAM,GAAG,GAA2B;QAClC,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,MAAM;QACpB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,OAAO;QACrB,WAAW,EAAE,MAAM;QACnB,iBAAiB,EAAE,MAAM;KAC1B,CAAC;IACF,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC"}