daycare-cli 0.0.0-canary.ecd8035 → 0.0.0-canary.eeb4e2f

package/dist/api/app-server/appAuthExtract.d.ts

@@ -0,0 +1,11 @@
+import type http from "node:http";
+/**
+ * Extracts and verifies a JWT from the Authorization: Bearer header.
+ * Returns the decoded userId on success, null on failure.
+ *
+ * Expects: secretResolve returns the active JWT secret.
+ */
+export declare function appAuthExtract(request: http.IncomingMessage, secretResolve: () => Promise<string>): Promise<{
+    userId: string;
+} | null>;
+//# sourceMappingURL=appAuthExtract.d.ts.map

package/dist/api/app-server/appAuthExtract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuthExtract.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appAuthExtract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC;;;;;GAKG;AACH,wBAAsB,cAAc,CAChC,OAAO,EAAE,IAAI,CAAC,eAAe,EAC7B,aAAa,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GACrC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAsBpC"}

package/dist/api/app-server/appAuthExtract.js

@@ -0,0 +1,29 @@
+import { jwtVerify } from "../../util/jwt.js";
+/**
+ * Extracts and verifies a JWT from the Authorization: Bearer header.
+ * Returns the decoded userId on success, null on failure.
+ *
+ * Expects: secretResolve returns the active JWT secret.
+ */
+export async function appAuthExtract(request, secretResolve) {
+    const header = request.headers.authorization;
+    if (!header) {
+        return null;
+    }
+    const parts = header.split(" ");
+    if (parts.length !== 2 || parts[0]?.toLowerCase() !== "bearer") {
+        return null;
+    }
+    const token = parts[1]?.trim();
+    if (!token) {
+        return null;
+    }
+    try {
+        const payload = await jwtVerify(token, await secretResolve());
+        return { userId: payload.userId };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=appAuthExtract.js.map

package/dist/api/app-server/appAuthExtract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuthExtract.js","sourceRoot":"","sources":["../../../sources/api/app-server/appAuthExtract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,OAA6B,EAC7B,aAAoC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,aAAa,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/{plugins/daycare-app-server → api/app-server}/appAuthLinkTool.d.ts

@@ -1,6 +1,8 @@
 import { type Static } from "@sinclair/typebox";
 import type { ToolDefinition } from "@/types";
-export declare const APP_AUTH_EXPIRES_IN_SECONDS = 3600;
+export declare const APP_AUTH_LINK_EXPIRES_IN_SECONDS = 3600;
+export declare const APP_AUTH_SESSION_EXPIRES_IN_SECONDS: number;
+export declare const APP_AUTH_LINK_SERVICE = "daycare.app-auth.link";
 export declare const APP_AUTH_DEFAULT_ENDPOINT = "https://daycare.dev";
 declare const appAuthLinkResultSchema: import("@sinclair/typebox").TObject<{
     url: import("@sinclair/typebox").TString;

package/dist/api/app-server/appAuthLinkTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuthLinkTool.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appAuthLinkTool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,MAAM,EAAQ,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,SAAS,CAAC;AAIlE,eAAO,MAAM,gCAAgC,OAAO,CAAC;AACrD,eAAO,MAAM,mCAAmC,QAAqB,CAAC;AACtE,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAC7D,eAAO,MAAM,yBAAyB,wBAAwB,CAAC;AAK/D,QAAA,MAAM,uBAAuB;;;;;EAQ5B,CAAC;AAEF,KAAK,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAOhE,MAAM,MAAM,wBAAwB,GAAG;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAarG;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,GACxB,MAAM,CAmBR;AAMD,MAAM,MAAM,sBAAsB,GAAG;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,cAAc,CAoC/E"}

package/dist/{plugins/daycare-app-server → api/app-server}/appAuthLinkTool.js

@@ -1,7 +1,9 @@
 import { Type } from "@sinclair/typebox";
 import { jwtSign } from "../../util/jwt.js";
 import { appEndpointNormalize } from "./appEndpointNormalize.js";
-export const APP_AUTH_EXPIRES_IN_SECONDS = 3600;
+export const APP_AUTH_LINK_EXPIRES_IN_SECONDS = 3600;
+export const APP_AUTH_SESSION_EXPIRES_IN_SECONDS = 365 * 24 * 60 * 60;
+export const APP_AUTH_LINK_SERVICE = "daycare.app-auth.link";
 export const APP_AUTH_DEFAULT_ENDPOINT = "https://daycare.dev";
 const appAuthLinkToolSchema = Type.Object({}, { additionalProperties: false });
 const appAuthLinkResultSchema = Type.Object({
@@ -19,8 +21,10 @@ const appAuthLinkReturns = {
  * Expects: host and userId are non-empty strings and secret is valid.
  */
 export async function appAuthLinkGenerate(input) {
-    const expiresInSeconds = input.expiresInSeconds ?? APP_AUTH_EXPIRES_IN_SECONDS;
-    const token = await jwtSign({ userId: input.userId }, input.secret, expiresInSeconds);
+    const expiresInSeconds = input.expiresInSeconds ?? APP_AUTH_LINK_EXPIRES_IN_SECONDS;
+    const token = await jwtSign({ userId: input.userId }, input.secret, expiresInSeconds, {
+        service: APP_AUTH_LINK_SERVICE
+    });
     const expiresAt = Date.now() + expiresInSeconds * 1000;
     return {
         userId: input.userId,

package/dist/api/app-server/appAuthLinkTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuthLinkTool.js","sourceRoot":"","sources":["../../../sources/api/app-server/appAuthLinkTool.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAI,CAAC;AACrD,MAAM,CAAC,MAAM,mCAAmC,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAAqB,CAAC;AAE/D,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AAG/E,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CACvC;IACI,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE;CAC3B,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAClC,CAAC;AAIF,MAAM,kBAAkB,GAA0C;IAC9D,MAAM,EAAE,uBAAuB;IAC/B,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,MAAM,CAAC,GAAG,EAAE;CAC3D,CAAC;AAYF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACrE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,gCAAgC,CAAC;IACpF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE;QAClF,OAAO,EAAE,qBAAqB;KACjC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAEvD,OAAO;QACH,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,SAAS;QACT,GAAG,EAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;KACnG,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAC/B,IAAY,EACZ,IAAY,EACZ,KAAa,EACb,WAAoB,EACpB,cAAuB;IAEvB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,yBAAyB,CAAC;IAC3C,MAAM,mBAAmB,GAAG,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,sBAAsB,GAAG,oBAAoB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,mBAAmB,IAAI,sBAAsB,IAAI,QAAQ,CAAC;IACzE,MAAM,UAAU,GAAG,sBAAsB,IAAI,MAAM,CAAC;IACpD,MAAM,WAAW,GAAG,4BAA4B,CAAC;QAC7C,UAAU;QACV,KAAK;KACR,CAAC,CAAC;IACH,OAAO,GAAG,MAAM,SAAS,WAAW,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,4BAA4B,CAAC,OAA8C;IAChF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC9E,CAAC;AAUD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC3D,OAAO;QACH,IAAI,EAAE;YACF,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,4EAA4E;YACzF,UAAU,EAAE,qBAAqB;SACpC;QACD,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,IAAuB,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC;gBACnC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM;gBAC1B,MAAM;aACT,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,qBAAqB,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAsB;gBACnC,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC;YAEF,OAAO;gBACH,WAAW;gBACX,WAAW,EAAE,IAAI;aACpB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dist/api/app-server/appAuthLinkTool.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuthLinkTool.spec.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appAuthLinkTool.spec.ts"],"names":[],"mappings":""}

package/dist/{plugins/daycare-app-server → api/app-server}/appAuthLinkTool.spec.js

@@ -1,7 +1,7 @@
 import { describe, expect, it } from "vitest";
 import { contextForUser } from "../../engine/agents/context.js";
 import { jwtVerify } from "../../util/jwt.js";
-import { appAuthLinkGenerate, appAuthLinkTool, appAuthLinkUrlBuild } from "./appAuthLinkTool.js";
+import { APP_AUTH_LINK_SERVICE, appAuthLinkGenerate, appAuthLinkTool, appAuthLinkUrlBuild } from "./appAuthLinkTool.js";
 describe("appAuthLinkUrlBuild", () => {
     it("builds auth URL using default app endpoint", () => {
         const url = appAuthLinkUrlBuild("127.0.0.1", 7332, "token-1");
@@ -45,7 +45,7 @@ describe("appAuthLinkGenerate", () => {
             secret: "test-secret"
         });
         expect(result.url.startsWith("https://daycare.dev/auth#")).toBe(true);
-        const payload = await jwtVerify(result.token, "test-secret");
+        const payload = await jwtVerify(result.token, "test-secret", { service: APP_AUTH_LINK_SERVICE });
         expect(payload.userId).toBe("user-7");
     });
 });
@@ -67,7 +67,7 @@ describe("appAuthLinkTool", () => {
         if (typeof token !== "string") {
             throw new Error("Expected tool token to be a string.");
         }
-        const payload = await jwtVerify(token, "test-secret");
+        const payload = await jwtVerify(token, "test-secret", { service: APP_AUTH_LINK_SERVICE });
         expect(payload.userId).toBe("user-11");
     });
 });

package/dist/{plugins/daycare-app-server → api/app-server}/appAuthLinkTool.spec.js.map

@@ -1 +1 @@
-{"version":3,"file":"appAuthLinkTool.spec.js","sourceRoot":"","sources":["../../../sources/plugins/daycare-app-server/appAuthLinkTool.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEjG,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,qBAAqB;YACjC,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,mBAAmB,CAC3B,SAAS,EACT,IAAI,EACJ,SAAS,EACT,0BAA0B,EAC1B,0BAA0B,CAC7B,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CACpF,qCAAqC,CACxC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACrC,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,aAAa;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,eAAe,CAAC;YACzB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa;SAC3C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,EAAE,EACF;YACI,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACV,EACpC;YACI,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,eAAe;SACxB,CACJ,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGhE,CAAC;AACN,CAAC"}
+{"version":3,"file":"appAuthLinkTool.spec.js","sourceRoot":"","sources":["../../../sources/api/app-server/appAuthLinkTool.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAExH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAClD,MAAM,GAAG,GAAG,mBAAmB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,qBAAqB;YACjC,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,mBAAmB,CAC3B,SAAS,EACT,IAAI,EACJ,SAAS,EACT,0BAA0B,EAC1B,0BAA0B,CAC7B,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,SAAS;SACnB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CACpF,qCAAqC,CACxC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACrC,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,aAAa;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,IAAI,GAAG,eAAe,CAAC;YACzB,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI;YACV,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,aAAa;SAC3C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,EAAE,EACF;YACI,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;SACV,EACpC;YACI,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,eAAe;SACxB,CACJ,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC;QACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IAC9E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAGhE,CAAC;AACN,CAAC"}

package/dist/api/app-server/appEndpointNormalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appEndpointNormalize.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appEndpointNormalize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CA2BrG"}

package/dist/api/app-server/appEndpointNormalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appEndpointNormalize.js","sourceRoot":"","sources":["../../../sources/api/app-server/appEndpointNormalize.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAyB,EAAE,SAAiB;IAC7E,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,kEAAkE,CAAC,CAAC;IACpG,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,gCAAgC,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,yCAAyC,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,2BAA2B,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC"}

package/dist/api/app-server/appEndpointNormalize.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appEndpointNormalize.spec.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appEndpointNormalize.spec.ts"],"names":[],"mappings":""}

package/dist/api/app-server/appEndpointNormalize.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appEndpointNormalize.spec.js","sourceRoot":"","sources":["../../../sources/api/app-server/appEndpointNormalize.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvE,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxG,MAAM,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CACxE,qCAAqC,CACxC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CACrF,sCAAsC,CACzC,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,8BAA8B,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CACrF,oDAAoD,CACvD,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,4BAA4B,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CACnF,oDAAoD,CACvD,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/api/app-server/appHttp.d.ts

@@ -0,0 +1,32 @@
+import type http from "node:http";
+/**
+ * Applies CORS headers to allow cross-origin requests from any origin.
+ * Expects: response is a writable ServerResponse.
+ */
+export declare function appCorsApply(response: http.ServerResponse): void;
+/**
+ * Sends a JSON response with CORS headers and no-store caching.
+ * Expects: payload is a JSON-serializable object.
+ */
+export declare function appSendJson(response: http.ServerResponse, statusCode: number, payload: Record<string, unknown>): void;
+/**
+ * Sends a plain text response with CORS headers and no-store caching.
+ * Expects: text is a non-empty string.
+ */
+export declare function appSendText(response: http.ServerResponse, statusCode: number, text: string): void;
+/**
+ * Reads and parses a JSON body from an incoming HTTP request.
+ * Expects: request body is valid JSON or empty.
+ */
+export declare function appReadJsonBody(request: http.IncomingMessage): Promise<Record<string, unknown>>;
+/**
+ * Starts the HTTP server listening on the given host and port.
+ * Expects: server is not already listening.
+ */
+export declare function appServerListen(server: http.Server, host: string, port: number): Promise<void>;
+/**
+ * Gracefully closes an HTTP server.
+ * Expects: server is currently listening.
+ */
+export declare function appServerClose(server: http.Server): Promise<void>;
+//# sourceMappingURL=appHttp.d.ts.map

package/dist/api/app-server/appHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appHttp.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,GAAG,IAAI,CAIhE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOrH;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOjG;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAiBrG;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe9F;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAUjE"}

package/dist/api/app-server/appHttp.js

@@ -0,0 +1,89 @@
+/**
+ * Applies CORS headers to allow cross-origin requests from any origin.
+ * Expects: response is a writable ServerResponse.
+ */
+export function appCorsApply(response) {
+    response.setHeader("access-control-allow-origin", "*");
+    response.setHeader("access-control-allow-methods", "GET,POST,PUT,PATCH,DELETE,OPTIONS");
+    response.setHeader("access-control-allow-headers", "content-type,authorization");
+}
+/**
+ * Sends a JSON response with CORS headers and no-store caching.
+ * Expects: payload is a JSON-serializable object.
+ */
+export function appSendJson(response, statusCode, payload) {
+    appCorsApply(response);
+    response.writeHead(statusCode, {
+        "content-type": "application/json; charset=utf-8",
+        "cache-control": "no-store"
+    });
+    response.end(`${JSON.stringify(payload)}\n`);
+}
+/**
+ * Sends a plain text response with CORS headers and no-store caching.
+ * Expects: text is a non-empty string.
+ */
+export function appSendText(response, statusCode, text) {
+    appCorsApply(response);
+    response.writeHead(statusCode, {
+        "content-type": "text/plain; charset=utf-8",
+        "cache-control": "no-store"
+    });
+    response.end(text);
+}
+/**
+ * Reads and parses a JSON body from an incoming HTTP request.
+ * Expects: request body is valid JSON or empty.
+ */
+export async function appReadJsonBody(request) {
+    const chunks = [];
+    for await (const chunk of request) {
+        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+    }
+    const text = Buffer.concat(chunks).toString("utf8").trim();
+    if (!text) {
+        return {};
+    }
+    try {
+        const parsed = JSON.parse(text);
+        return parsed && typeof parsed === "object" ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Starts the HTTP server listening on the given host and port.
+ * Expects: server is not already listening.
+ */
+export function appServerListen(server, host, port) {
+    return new Promise((resolve, reject) => {
+        const onError = (error) => {
+            server.off("listening", onListening);
+            reject(error);
+        };
+        const onListening = () => {
+            server.off("error", onError);
+            resolve();
+        };
+        server.once("error", onError);
+        server.once("listening", onListening);
+        server.listen({ host, port });
+    });
+}
+/**
+ * Gracefully closes an HTTP server.
+ * Expects: server is currently listening.
+ */
+export function appServerClose(server) {
+    return new Promise((resolve, reject) => {
+        server.close((error) => {
+            if (error) {
+                reject(error);
+                return;
+            }
+            resolve();
+        });
+    });
+}
+//# sourceMappingURL=appHttp.js.map

package/dist/api/app-server/appHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appHttp.js","sourceRoot":"","sources":["../../../sources/api/app-server/appHttp.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAA6B;IACtD,QAAQ,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,mCAAmC,CAAC,CAAC;IACxF,QAAQ,CAAC,SAAS,CAAC,8BAA8B,EAAE,4BAA4B,CAAC,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAA6B,EAAE,UAAkB,EAAE,OAAgC;IAC3G,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;QAC3B,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;KAC9B,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAA6B,EAAE,UAAkB,EAAE,IAAY;IACvF,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE;QAC3B,cAAc,EAAE,2BAA2B;QAC3C,eAAe,EAAE,UAAU;KAC9B,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA6B;IAC/D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QAC3D,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAmB,EAAE,IAAY,EAAE,IAAY;IAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,CAAC,KAAY,EAAE,EAAE;YAC7B,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACrB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC7B,OAAO,EAAE,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmB;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACnB,IAAI,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACX,CAAC;YACD,OAAO,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/{plugins/daycare-app-server → api/app-server}/appJwtSecretResolve.d.ts

@@ -1,10 +1,10 @@
-export declare const APP_AUTH_SECRET_KEY = "app-auth.jwtSecret";
+export declare const APP_AUTH_SEED_KEY = "seed";
 export type AppAuthStore = {
     getEntry: (id: string) => Promise<Record<string, unknown> | null>;
     setEntry: (id: string, entry: Record<string, unknown>) => Promise<void>;
 };
 /**
- * Resolves the app JWT secret from plugin settings or auth store, generating one if missing.
+ * Resolves the shared auth seed from app server settings or auth store, generating one if missing.
  * Expects: settingsSecret may be undefined; auth provides get/set entry access.
  */
 export declare function appJwtSecretResolve(settingsSecret: string | undefined, auth: AppAuthStore): Promise<string>;

package/dist/api/app-server/appJwtSecretResolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appJwtSecretResolve.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appJwtSecretResolve.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iBAAiB,SAAS,CAAC;AAExC,MAAM,MAAM,YAAY,GAAG;IACvB,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAClE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E,CAAC;AAEF;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBjH"}

package/dist/api/app-server/appJwtSecretResolve.js

@@ -0,0 +1,23 @@
+import { randomBytes } from "node:crypto";
+export const APP_AUTH_SEED_KEY = "seed";
+/**
+ * Resolves the shared auth seed from app server settings or auth store, generating one if missing.
+ * Expects: settingsSecret may be undefined; auth provides get/set entry access.
+ */
+export async function appJwtSecretResolve(settingsSecret, auth) {
+    const fromSettings = settingsSecret?.trim();
+    if (fromSettings && fromSettings.length >= 32) {
+        return fromSettings;
+    }
+    const existing = await auth.getEntry(APP_AUTH_SEED_KEY);
+    const existingSecret = typeof existing?.seed === "string" ? existing.seed : "";
+    if (existingSecret.length >= 32) {
+        return existingSecret;
+    }
+    const generated = randomBytes(32).toString("base64url");
+    await auth.setEntry(APP_AUTH_SEED_KEY, {
+        seed: generated
+    });
+    return generated;
+}
+//# sourceMappingURL=appJwtSecretResolve.js.map

package/dist/api/app-server/appJwtSecretResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appJwtSecretResolve.js","sourceRoot":"","sources":["../../../sources/api/app-server/appJwtSecretResolve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAOxC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,cAAkC,EAAE,IAAkB;IAC5F,MAAM,YAAY,GAAG,cAAc,EAAE,IAAI,EAAE,CAAC;IAC5C,IAAI,YAAY,IAAI,YAAY,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO,YAAY,CAAC;IACxB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,OAAO,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAE/E,IAAI,cAAc,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE;QACnC,IAAI,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/dist/api/app-server/appServer.d.ts

@@ -0,0 +1,52 @@
+import type { Context, TaskActiveSummary } from "@/types";
+import type { AuthStore } from "../../auth/store.js";
+import type { ConfigModule } from "../../engine/config/configModule.js";
+import type { CommandRegistry } from "../../engine/modules/commandRegistry.js";
+import type { ConnectorRegistry } from "../../engine/modules/connectorRegistry.js";
+import type { ToolResolver } from "../../engine/modules/toolResolver.js";
+import type { Webhooks } from "../../engine/webhook/webhooks.js";
+import type { TokenStatsHourlyDbRecord } from "../../storage/databaseTypes.js";
+import type { TokenStatsFetchOptions } from "../routes/costs/costsRoutes.js";
+export type AppServerOptions = {
+    config: ConfigModule;
+    auth: AuthStore;
+    commandRegistry: CommandRegistry;
+    connectorRegistry: ConnectorRegistry;
+    toolResolver: ToolResolver;
+    webhooks: Webhooks;
+    tasksListActive: (ctx: Context) => Promise<TaskActiveSummary[]>;
+    tokenStatsFetch: (ctx: Context, options: TokenStatsFetchOptions) => Promise<TokenStatsHourlyDbRecord[]>;
+};
+/**
+ * Runs the Daycare app HTTP server from core runtime settings.
+ * Manages route handling, command/tool registration, and lifecycle across reloads.
+ *
+ * Expects: dependencies are initialized and share the same engine config snapshot.
+ */
+export declare class AppServer {
+    private readonly config;
+    private readonly auth;
+    private readonly commandRegistry;
+    private readonly connectorRegistry;
+    private readonly toolResolver;
+    private readonly webhooks;
+    private readonly tasksListActive;
+    private readonly tokenStatsFetch;
+    private readonly logger;
+    private server;
+    private activeSettings;
+    private secretPromise;
+    constructor(options: AppServerOptions);
+    start(): Promise<void>;
+    reload(): Promise<void>;
+    stop(): Promise<void>;
+    private settingsApply;
+    private requestHandle;
+    private telegramTokenResolve;
+    private secretResolve;
+    private registerRuntime;
+    private shutdown;
+    private messageSend;
+    private settingsRequire;
+}
+//# sourceMappingURL=appServer.d.ts.map

package/dist/api/app-server/appServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appServer.d.ts","sourceRoot":"","sources":["../../../sources/api/app-server/appServer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAoB,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAEjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC/E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAe7E,MAAM,MAAM,gBAAgB,GAAG;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,SAAS,CAAC;IAChB,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,YAAY,EAAE,YAAY,CAAC;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,eAAe,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAChE,eAAe,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,KAAK,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;CAC3G,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,SAAS;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAY;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAsC;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IAEtD,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,cAAc,CAA0C;IAChE,OAAO,CAAC,aAAa,CAAgC;gBAEzC,OAAO,EAAE,gBAAgB;IAW/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAIb,aAAa;YAyCb,aAAa;YAmEb,oBAAoB;YA6BpB,aAAa;IAQ3B,OAAO,CAAC,eAAe;YA+CT,QAAQ;YAeR,WAAW;IAmBzB,OAAO,CAAC,eAAe;CAM1B"}