dorkos 0.25.0 → 0.26.0

package/dist/server/index.js

@@ -29626,10 +29626,10 @@ var require_composer = __commonJS({
        * @param routeHandlers Handlers for every route
        * @param fallback Optional fallback middleware if no route matches
        */
-      route(router13, routeHandlers, fallback = pass) {
+      route(router14, routeHandlers, fallback = pass) {
         return this.lazy(async (ctx) => {
           var _a;
-          const route = await router13(ctx);
+          const route = await router14(ctx);
           return (_a = route === void 0 || !routeHandlers[route] ? fallback : routeHandlers[route]) !== null && _a !== void 0 ? _a : [];
         });
       }
@@ -70954,7 +70954,7 @@ var require_ExpressReceiver = __commonJS({
       processEventErrorHandler;
       unhandledRequestHandler;
       unhandledRequestTimeoutMillis;
-      constructor({ signingSecret = "", logger: logger3 = void 0, logLevel = logger_1.LogLevel.INFO, endpoints = { events: "/slack/events" }, processBeforeResponse = false, signatureVerification = true, clientId = void 0, clientSecret = void 0, stateSecret = void 0, redirectUri = void 0, installationStore = void 0, scopes = void 0, installerOptions = {}, app = void 0, router: router13 = void 0, customPropertiesExtractor = (_req) => ({}), dispatchErrorHandler = httpFunc.defaultAsyncDispatchErrorHandler, processEventErrorHandler = httpFunc.defaultProcessEventErrorHandler, unhandledRequestHandler = httpFunc.defaultUnhandledRequestHandler, unhandledRequestTimeoutMillis = 3001 }) {
+      constructor({ signingSecret = "", logger: logger3 = void 0, logLevel = logger_1.LogLevel.INFO, endpoints = { events: "/slack/events" }, processBeforeResponse = false, signatureVerification = true, clientId = void 0, clientSecret = void 0, stateSecret = void 0, redirectUri = void 0, installationStore = void 0, scopes = void 0, installerOptions = {}, app = void 0, router: router14 = void 0, customPropertiesExtractor = (_req) => ({}), dispatchErrorHandler = httpFunc.defaultAsyncDispatchErrorHandler, processEventErrorHandler = httpFunc.defaultProcessEventErrorHandler, unhandledRequestHandler = httpFunc.defaultUnhandledRequestHandler, unhandledRequestTimeoutMillis = 3001 }) {
         this.app = app !== void 0 ? app : (0, express_1.default)();
         if (typeof logger3 !== "undefined") {
           this.logger = logger3;
@@ -70972,7 +70972,7 @@ var require_ExpressReceiver = __commonJS({
         ];
         this.processBeforeResponse = processBeforeResponse;
         const endpointList = typeof endpoints === "string" ? [endpoints] : Object.values(endpoints);
-        this.router = router13 !== void 0 ? router13 : (0, express_1.Router)();
+        this.router = router14 !== void 0 ? router14 : (0, express_1.Router)();
         for (const endpoint of endpointList) {
           this.router.post(endpoint, ...expressMiddleware);
         }
@@ -81890,7 +81890,7 @@ var UiCommandSchema = z.discriminatedUnion("action", [
   // Canvas commands
   z.object({
     action: z.literal("open_canvas"),
-    content: UiCanvasContentSchema,
+    content: UiCanvasContentSchema.optional(),
     preferredWidth: z.number().min(20).max(80).optional()
   }),
   z.object({
@@ -82737,7 +82737,7 @@ var SERVER_VERSION = resolveVersion();
 var IS_DEV_BUILD = checkDevBuild(SERVER_VERSION);
 function resolveVersion() {
   if (env.DORKOS_VERSION_OVERRIDE) return env.DORKOS_VERSION_OVERRIDE;
-  if (true) return "0.25.0";
+  if (true) return "0.26.0";
   const pkgPath = path5.join(path5.dirname(fileURLToPath2(import.meta.url)), "../../package.json");
   return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
@@ -84231,6 +84231,7 @@ async function verifyPasscode(passcode, storedHash, storedSalt) {
 }
 
 // ../../apps/server/src/routes/tunnel.ts
+init_logger();
 var router8 = Router8();
 function resolveTunnelPort() {
   if (process.env.TUNNEL_PORT) return Number(process.env.TUNNEL_PORT);
@@ -84242,6 +84243,7 @@ router8.get("/status", (_req, res) => {
   res.json(tunnelManager.status);
 });
 router8.get("/stream", (req, res) => {
+  logger.warn("[DEPRECATED] GET /api/tunnel/stream \u2014 use GET /api/events instead");
   res.writeHead(200, {
     "Content-Type": "text/event-stream",
     "Cache-Control": "no-cache",
@@ -84554,6 +84556,85 @@ router12.get("/", async (req, res) => {
 });
 var mcp_config_default = router12;
 
+// ../../apps/server/src/routes/events.ts
+import { Router as Router13 } from "express";
+
+// ../../apps/server/src/services/core/event-fan-out.ts
+init_logger();
+var EventFanOut = class {
+  clients = /* @__PURE__ */ new Set();
+  /** Register an SSE client. Returns an unsubscribe function. */
+  addClient(res) {
+    if (this.clients.size >= SSE.MAX_TOTAL_CLIENTS) {
+      logger.warn(`[EventFanOut] Max clients reached (${SSE.MAX_TOTAL_CLIENTS}), rejecting`);
+      res.status(503).json({ error: "Too many SSE clients" });
+      return () => {
+      };
+    }
+    this.clients.add(res);
+    return () => {
+      this.clients.delete(res);
+    };
+  }
+  /** Broadcast an SSE event to all connected clients. */
+  broadcast(eventName, data) {
+    const payload = `event: ${eventName}
+data: ${JSON.stringify(data)}
+
+`;
+    for (const client of this.clients) {
+      if (client.writableEnded) {
+        this.clients.delete(client);
+        continue;
+      }
+      try {
+        const canContinue = client.write(payload);
+        if (!canContinue) {
+          client.once("drain", () => {
+          });
+        }
+      } catch {
+        this.clients.delete(client);
+      }
+    }
+  }
+  /** Number of currently connected clients. */
+  get clientCount() {
+    return this.clients.size;
+  }
+};
+var eventFanOut = new EventFanOut();
+
+// ../../apps/server/src/routes/events.ts
+var router13 = Router13();
+router13.get("/", (req, res) => {
+  const unsubscribe = eventFanOut.addClient(res);
+  if (res.writableEnded) return;
+  initSSEStream(res);
+  res.write(
+    `event: connected
+data: ${JSON.stringify({ connectedAt: (/* @__PURE__ */ new Date()).toISOString() })}
+
+`
+  );
+  const heartbeat = setInterval(() => {
+    if (res.writableEnded) {
+      clearInterval(heartbeat);
+      return;
+    }
+    try {
+      res.write("event: heartbeat\ndata: \n\n");
+    } catch {
+      clearInterval(heartbeat);
+    }
+  }, SSE.HEARTBEAT_INTERVAL_MS);
+  req.on("close", () => {
+    clearInterval(heartbeat);
+    unsubscribe();
+  });
+});
+var events_default = router13;
+
 // ../../apps/server/src/services/core/openapi-registry.ts
 init_env();
 import { OpenAPIRegistry, OpenApiGeneratorV31 } from "@asteasolutions/zod-to-openapi";
@@ -86184,7 +86265,7 @@ function tunnelPasscodeAuth(req, res, next) {
 }
 
 // ../../apps/server/src/routes/test-control.ts
-import { Router as Router13 } from "express";
+import { Router as Router14 } from "express";
 import os2 from "os";
 import path12 from "path";
 import { z as z16 } from "zod";
@@ -86491,7 +86572,7 @@ async function removeManifest(projectPath) {
 
 // ../../apps/server/src/routes/test-control.ts
 init_scenario_store();
-var testControlRouter = Router13();
+var testControlRouter = Router14();
 var scenarioSchema = z16.object({
   name: z16.string().min(1),
   sessionId: z16.string().uuid().optional()
@@ -86598,6 +86679,7 @@ function createApp() {
   app.use("/api/capabilities", capabilities_default);
   app.use("/api/uploads", uploads_default);
   app.use("/api/mcp-config", mcp_config_default);
+  app.use("/api/events", events_default);
   if (env.DORKOS_TEST_RUNTIME) {
     app.use("/api/test", testControlRouter);
   }
@@ -93148,7 +93230,7 @@ import { z as z28 } from "zod";
 
 // ../../apps/server/src/routes/extensions.ts
 init_logger();
-import { Router as Router14 } from "express";
+import { Router as Router15 } from "express";
 import fs14 from "fs/promises";
 import path20 from "path";
 import { z as z27 } from "zod";
@@ -93159,6 +93241,11 @@ function broadcastExtensionReloaded(extensionIds) {
     extensionIds,
     timestamp: Date.now()
   });
+  eventFanOut.broadcast("extension_reloaded", {
+    type: "extension_reloaded",
+    extensionIds,
+    timestamp: Date.now()
+  });
   for (const client of sseClients) {
     try {
       client.write(`event: extension_reloaded
@@ -93175,8 +93262,9 @@ var CwdChangedBodySchema = z27.object({
 });
 var SAFE_EXT_ID = /^[a-z0-9][a-z0-9-]*$/;
 function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
-  const router13 = Router14();
-  router13.get("/events", (_req, res) => {
+  const router14 = Router15();
+  router14.get("/events", (_req, res) => {
+    logger.warn("[DEPRECATED] GET /api/extensions/events \u2014 use GET /api/events instead");
     res.set({
       "Content-Type": "text/event-stream",
       "Cache-Control": "no-cache",
@@ -93189,7 +93277,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       sseClients.delete(res);
     });
   });
-  router13.get("/", async (_req, res) => {
+  router14.get("/", async (_req, res) => {
     try {
       const extensions = extensionManager2.listPublic();
       res.json(extensions);
@@ -93198,7 +93286,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to list extensions" });
     }
   });
-  router13.post("/:id/enable", async (req, res) => {
+  router14.post("/:id/enable", async (req, res) => {
     try {
       const { id } = req.params;
       if (!SAFE_EXT_ID.test(id)) return res.status(400).json({ error: "Invalid extension ID" });
@@ -93212,7 +93300,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to enable extension" });
     }
   });
-  router13.post("/:id/disable", async (req, res) => {
+  router14.post("/:id/disable", async (req, res) => {
     try {
       const { id } = req.params;
       if (!SAFE_EXT_ID.test(id)) return res.status(400).json({ error: "Invalid extension ID" });
@@ -93226,7 +93314,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to disable extension" });
     }
   });
-  router13.post("/reload", async (_req, res) => {
+  router14.post("/reload", async (_req, res) => {
     try {
       const extensions = await extensionManager2.reload();
       res.json(extensions);
@@ -93235,7 +93323,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to reload extensions" });
     }
   });
-  router13.post("/cwd-changed", async (req, res) => {
+  router14.post("/cwd-changed", async (req, res) => {
     try {
       const parsed = CwdChangedBodySchema.safeParse(req.body);
       if (!parsed.success) {
@@ -93255,7 +93343,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to handle CWD change" });
     }
   });
-  router13.get("/:id/bundle", async (req, res) => {
+  router14.get("/:id/bundle", async (req, res) => {
     try {
       const { id } = req.params;
       if (!SAFE_EXT_ID.test(id)) return res.status(400).json({ error: "Invalid extension ID" });
@@ -93271,7 +93359,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to serve bundle" });
     }
   });
-  router13.get("/:id/data", async (req, res) => {
+  router14.get("/:id/data", async (req, res) => {
     try {
       const { id } = req.params;
       if (!SAFE_EXT_ID.test(id)) return res.status(400).json({ error: "Invalid extension ID" });
@@ -93290,7 +93378,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to read extension data" });
     }
   });
-  router13.put("/:id/data", async (req, res) => {
+  router14.put("/:id/data", async (req, res) => {
     try {
       const { id } = req.params;
       if (!SAFE_EXT_ID.test(id)) return res.status(400).json({ error: "Invalid extension ID" });
@@ -93308,7 +93396,7 @@ function createExtensionsRouter(extensionManager2, dorkHome, getCwd) {
       res.status(500).json({ error: "Failed to write extension data" });
     }
   });
-  return router13;
+  return router14;
 }
 function resolveDataPath(id, manager, dorkHome, getCwd) {
   const record2 = manager.get(id);
@@ -100105,7 +100193,7 @@ var SchedulerService = class {
 };
 
 // ../../apps/server/src/routes/pulse.ts
-import { Router as Router15 } from "express";
+import { Router as Router16 } from "express";
 
 // ../../apps/server/src/services/pulse/pulse-presets.ts
 import { readFile as readFile5, writeFile as writeFile3, mkdir as mkdir2 } from "node:fs/promises";
@@ -100177,19 +100265,19 @@ async function loadPresets(dorkHome) {
 
 // ../../apps/server/src/routes/pulse.ts
 function createPulseRouter(store, scheduler, dorkHome, meshCore2) {
-  const router13 = Router15();
-  router13.get("/presets", async (_req, res) => {
+  const router14 = Router16();
+  router14.get("/presets", async (_req, res) => {
     const presets = await loadPresets(dorkHome);
     return res.json(presets);
   });
-  router13.get("/schedules", (_req, res) => {
+  router14.get("/schedules", (_req, res) => {
     const schedules = store.getSchedules().map((s3) => ({
       ...s3,
       nextRun: scheduler.getNextRun(s3.id)?.toISOString() ?? null
     }));
     res.json(schedules);
   });
-  router13.post("/schedules", async (req, res) => {
+  router14.post("/schedules", async (req, res) => {
     const data = parseBody(CreateScheduleRequestSchema, req.body, res);
     if (!data) return;
     if (data.cwd) {
@@ -100210,7 +100298,7 @@ function createPulseRouter(store, scheduler, dorkHome, meshCore2) {
     }
     return res.status(201).json(schedule);
   });
-  router13.patch("/schedules/:id", async (req, res) => {
+  router14.patch("/schedules/:id", async (req, res) => {
     const data = parseBody(UpdateScheduleRequestSchema, req.body, res);
     if (!data) return;
     if (data.cwd) {
@@ -100236,7 +100324,7 @@ function createPulseRouter(store, scheduler, dorkHome, meshCore2) {
     }
     return res.json(updated);
   });
-  router13.delete("/schedules/:id", (_req, res) => {
+  router14.delete("/schedules/:id", (_req, res) => {
     const { id } = _req.params;
     scheduler.unregisterSchedule(id);
     const deleted = store.deleteSchedule(id);
@@ -100245,14 +100333,14 @@ function createPulseRouter(store, scheduler, dorkHome, meshCore2) {
     }
     return res.json({ success: true });
   });
-  router13.post("/schedules/:id/trigger", async (_req, res) => {
+  router14.post("/schedules/:id/trigger", async (_req, res) => {
     const run = await scheduler.triggerManualRun(_req.params.id);
     if (!run) {
       return res.status(404).json({ error: "Schedule not found" });
     }
     return res.status(201).json({ runId: run.id });
   });
-  router13.get("/runs", (req, res) => {
+  router14.get("/runs", (req, res) => {
     const data = parseBody(ListRunsQuerySchema, req.query, res);
     if (!data) return;
     const runs = store.listRuns({
@@ -100263,21 +100351,21 @@ function createPulseRouter(store, scheduler, dorkHome, meshCore2) {
     });
     return res.json(runs);
   });
-  router13.get("/runs/:id", (req, res) => {
+  router14.get("/runs/:id", (req, res) => {
     const run = store.getRun(req.params.id);
     if (!run) {
       return res.status(404).json({ error: "Run not found" });
     }
     res.json(run);
   });
-  router13.post("/runs/:id/cancel", (req, res) => {
+  router14.post("/runs/:id/cancel", (req, res) => {
     const cancelled = scheduler.cancelRun(req.params.id);
     if (!cancelled) {
       return res.status(404).json({ error: "Run not found or not active" });
     }
     return res.json({ success: true });
   });
-  return router13;
+  return router14;
 }
 
 // ../relay/dist/relay-core.js
@@ -125816,7 +125904,7 @@ function validateAdapterShape(obj, id) {
 }
 
 // ../../apps/server/src/routes/relay.ts
-import { Router as Router17 } from "express";
+import { Router as Router18 } from "express";
 
 // ../../apps/server/src/services/relay/subject-resolver.ts
 var SESSION_ID_PREVIEW_LENGTH = 7;
@@ -125858,7 +125946,7 @@ async function resolveSubjectLabels(subjects, deps) {
 }
 
 // ../../apps/server/src/routes/relay-adapters.ts
-import { Router as Router16 } from "express";
+import { Router as Router17 } from "express";
 import express2 from "express";
 import { z as z31 } from "zod";
 
@@ -127295,8 +127383,8 @@ function sendAdapterError(res, err) {
   res.status(status).json({ error: err.message, code: err.code });
 }
 function createAdapterRouter(adapterManager2, traceStore2) {
-  const router13 = Router16();
-  router13.get("/adapters/catalog", (_req, res) => {
+  const router14 = Router17();
+  router14.get("/adapters/catalog", (_req, res) => {
     try {
       res.json(adapterManager2.getCatalog());
     } catch (err) {
@@ -127304,7 +127392,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       res.status(500).json({ error: message });
     }
   });
-  router13.post("/adapters/reload", async (_req, res) => {
+  router14.post("/adapters/reload", async (_req, res) => {
     try {
       await adapterManager2.reload();
       return res.json({ ok: true });
@@ -127313,13 +127401,13 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.get("/adapters", (_req, res) => res.json(adapterManager2.listAdapters()));
-  router13.get("/adapters/:id", (req, res) => {
+  router14.get("/adapters", (_req, res) => res.json(adapterManager2.listAdapters()));
+  router14.get("/adapters/:id", (req, res) => {
     const adapter = adapterManager2.getAdapter(req.params.id);
     if (!adapter) return res.status(404).json({ error: "Adapter not found" });
     return res.json(adapter);
   });
-  router13.post("/adapters/test", async (req, res) => {
+  router14.post("/adapters/test", async (req, res) => {
     const result2 = AdapterTestRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127332,7 +127420,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.post("/adapters", async (req, res) => {
+  router14.post("/adapters", async (req, res) => {
     const result2 = AdapterCreateRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127348,7 +127436,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.delete("/adapters/:id", async (req, res) => {
+  router14.delete("/adapters/:id", async (req, res) => {
     try {
       await adapterManager2.removeAdapter(req.params.id);
       return res.json({ ok: true });
@@ -127358,7 +127446,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.patch("/adapters/:id/config", async (req, res) => {
+  router14.patch("/adapters/:id/config", async (req, res) => {
     const result2 = AdapterConfigUpdateSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127372,7 +127460,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.post("/adapters/:id/enable", async (req, res) => {
+  router14.post("/adapters/:id/enable", async (req, res) => {
     try {
       await adapterManager2.enable(req.params.id);
       return res.json({ ok: true });
@@ -127380,7 +127468,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(400).json({ error: err instanceof Error ? err.message : "Enable failed" });
     }
   });
-  router13.post("/adapters/:id/disable", async (req, res) => {
+  router14.post("/adapters/:id/disable", async (req, res) => {
     try {
       await adapterManager2.disable(req.params.id);
       return res.json({ ok: true });
@@ -127388,7 +127476,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(400).json({ error: err instanceof Error ? err.message : "Disable failed" });
     }
   });
-  router13.get("/adapters/:id/events", (_req, res) => {
+  router14.get("/adapters/:id/events", (_req, res) => {
     if (!traceStore2) return res.status(404).json({ error: "Tracing not available" });
     const { id } = _req.params;
     const limitParam = parseInt(_req.query.limit);
@@ -127396,7 +127484,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
     const events = traceStore2.getAdapterEvents(id, limit);
     return res.json({ events });
   });
-  router13.get("/adapters/:id/chats", (_req, res) => {
+  router14.get("/adapters/:id/chats", (_req, res) => {
     if (!traceStore2) return res.status(404).json({ error: "Tracing not available" });
     const { id } = _req.params;
     const limitParam = parseInt(_req.query.limit);
@@ -127404,19 +127492,19 @@ function createAdapterRouter(adapterManager2, traceStore2) {
     const chats = traceStore2.getObservedChats(id, limit);
     return res.json({ chats });
   });
-  router13.get("/bindings", (_req, res) => {
+  router14.get("/bindings", (_req, res) => {
     const bindingStore = adapterManager2.getBindingStore();
     if (!bindingStore) return res.status(503).json({ error: "Binding subsystem not available" });
     return res.json({ bindings: bindingStore.getAll() });
   });
-  router13.get("/bindings/:id", (req, res) => {
+  router14.get("/bindings/:id", (req, res) => {
     const bindingStore = adapterManager2.getBindingStore();
     if (!bindingStore) return res.status(503).json({ error: "Binding subsystem not available" });
     const binding = bindingStore.getById(req.params.id);
     if (!binding) return res.status(404).json({ error: "Binding not found" });
     return res.json({ binding });
   });
-  router13.post("/bindings", async (req, res) => {
+  router14.post("/bindings", async (req, res) => {
     const bindingStore = adapterManager2.getBindingStore();
     if (!bindingStore) return res.status(503).json({ error: "Binding subsystem not available" });
     const result2 = CreateBindingRequestSchema.safeParse(req.body);
@@ -127446,7 +127534,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.patch("/bindings/:id", async (req, res) => {
+  router14.patch("/bindings/:id", async (req, res) => {
     const bindingStore = adapterManager2.getBindingStore();
     if (!bindingStore) {
       return res.status(503).json({ error: "Binding subsystem not available" });
@@ -127477,7 +127565,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
     }
     return res.json({ binding: updated });
   });
-  router13.delete("/bindings/:id", async (req, res) => {
+  router14.delete("/bindings/:id", async (req, res) => {
     const bindingStore = adapterManager2.getBindingStore();
     if (!bindingStore) return res.status(503).json({ error: "Binding subsystem not available" });
     const deleted = await bindingStore.delete(req.params.id);
@@ -127489,7 +127577,7 @@ function createAdapterRouter(adapterManager2, traceStore2) {
     }
     return res.json({ ok: true });
   });
-  router13.post("/webhooks/:adapterId", express2.raw({ type: "*/*" }), async (req, res) => {
+  router14.post("/webhooks/:adapterId", express2.raw({ type: "*/*" }), async (req, res) => {
     const adapterInfo = adapterManager2.getAdapter(req.params.adapterId);
     if (!adapterInfo || adapterInfo.config.type !== "webhook") {
       return res.status(404).json({ error: "Webhook adapter not found" });
@@ -127508,10 +127596,11 @@ function createAdapterRouter(adapterManager2, traceStore2) {
     if (result2.ok) return res.status(200).json({ ok: true });
     return res.status(401).json({ error: result2.error });
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/routes/relay.ts
+init_logger();
 var ALLOWED_PREFIXES = ["relay.human.console.", "relay.system.", "relay.signal."];
 var PREVIEW_MAX_CHARS = 120;
 function validateSubscriptionPattern(pattern) {
@@ -127578,8 +127667,8 @@ function buildConversations(messages, deadLetters, labelMap) {
   });
 }
 function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
-  const router13 = Router17();
-  router13.post("/messages", async (req, res) => {
+  const router14 = Router18();
+  router14.post("/messages", async (req, res) => {
     const result2 = SendMessageRequestSchema2.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127599,7 +127688,7 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
       });
     }
   });
-  router13.get("/messages", (_req, res) => {
+  router14.get("/messages", (_req, res) => {
     const result2 = MessageListQuerySchema.safeParse(_req.query);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127607,7 +127696,7 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
     const messages = relayCore2.listMessages(result2.data);
     return res.json(messages);
   });
-  router13.get("/conversations", async (_req, res) => {
+  router14.get("/conversations", async (_req, res) => {
     try {
       const messages = relayCore2.listMessages({});
       const deadLetters = await relayCore2.getDeadLetters();
@@ -127628,15 +127717,15 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.get("/messages/:id", (_req, res) => {
+  router14.get("/messages/:id", (_req, res) => {
     const message = relayCore2.getMessage(_req.params.id);
     if (!message) return res.status(404).json({ error: "Message not found" });
     return res.json(message);
   });
-  router13.get("/endpoints", (_req, res) => {
+  router14.get("/endpoints", (_req, res) => {
     return res.json(relayCore2.listEndpoints());
   });
-  router13.post("/endpoints", async (req, res) => {
+  router14.post("/endpoints", async (req, res) => {
     const result2 = EndpointRegistrationSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127649,12 +127738,12 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
       return res.status(422).json({ error: message });
     }
   });
-  router13.delete(/^\/endpoints\/(.+)$/, async (req, res) => {
+  router14.delete(/^\/endpoints\/(.+)$/, async (req, res) => {
     const removed = await relayCore2.unregisterEndpoint(req.params[0]);
     if (!removed) return res.status(404).json({ error: "Endpoint not found" });
     return res.json({ success: true });
   });
-  router13.get(/^\/endpoints\/(.+)\/inbox$/, (_req, res) => {
+  router14.get(/^\/endpoints\/(.+)\/inbox$/, (_req, res) => {
     const result2 = InboxQuerySchema.safeParse(_req.query);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -127669,12 +127758,12 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
       throw err;
     }
   });
-  router13.get("/dead-letters", async (_req, res) => {
+  router14.get("/dead-letters", async (_req, res) => {
     const endpointHash = _req.query.endpointHash;
     const deadLetters = await relayCore2.getDeadLetters(endpointHash ? { endpointHash } : void 0);
     return res.json(deadLetters);
   });
-  router13.get("/dead-letters/aggregated", async (_req, res) => {
+  router14.get("/dead-letters/aggregated", async (_req, res) => {
     const deadLetters = await relayCore2.getDeadLetters();
     const groups = /* @__PURE__ */ new Map();
     for (const dl of deadLetters) {
@@ -127698,7 +127787,7 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
     }
     return res.json({ groups: [...groups.values()] });
   });
-  router13.delete("/dead-letters", async (req, res) => {
+  router14.delete("/dead-letters", async (req, res) => {
     const { source, reason } = req.body;
     if (!source || !reason) {
       return res.status(400).json({ error: "source and reason are required" });
@@ -127712,19 +127801,20 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
     }
     return res.json({ removed: toRemove.length });
   });
-  router13.get("/metrics", (_req, res) => res.json(relayCore2.getMetrics()));
-  router13.get("/messages/:id/trace", (_req, res) => {
+  router14.get("/metrics", (_req, res) => res.json(relayCore2.getMetrics()));
+  router14.get("/messages/:id/trace", (_req, res) => {
     if (!traceStore2) return res.status(404).json({ error: "Tracing not available" });
     const span = traceStore2.getSpanByMessageId(_req.params.id);
     if (!span) return res.status(404).json({ error: "Trace not found" });
     const spans = traceStore2.getTrace(span.traceId);
     return res.json({ traceId: span.traceId, spans });
   });
-  router13.get("/trace/metrics", (_req, res) => {
+  router14.get("/trace/metrics", (_req, res) => {
     if (!traceStore2) return res.status(404).json({ error: "Tracing not available" });
     return res.json(traceStore2.getMetrics());
   });
-  router13.get("/stream", (req, res) => {
+  router14.get("/stream", (req, res) => {
+    logger.warn("[DEPRECATED] GET /api/relay/stream \u2014 use GET /api/events instead");
     const pattern = req.query.subject || "relay.human.console.>";
     if (!validateSubscriptionPattern(pattern)) {
       return res.status(400).json({ error: "Invalid subscription pattern", allowedPrefixes: ALLOWED_PREFIXES });
@@ -127793,9 +127883,9 @@ function createRelayRouter(relayCore2, adapterManager2, traceStore2) {
     });
   });
   if (adapterManager2) {
-    router13.use("/", createAdapterRouter(adapterManager2, traceStore2));
+    router14.use("/", createAdapterRouter(adapterManager2, traceStore2));
   }
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/services/relay/trace-store.ts
@@ -129525,7 +129615,7 @@ var MeshCore = class {
 };
 
 // ../../apps/server/src/routes/mesh.ts
-import { Router as Router18 } from "express";
+import { Router as Router19 } from "express";
 function enrichTopology(topology, deps) {
   const scheduleCounts = /* @__PURE__ */ new Map();
   if (deps.pulseStore) {
@@ -129608,8 +129698,8 @@ function enrichAgent(agent, namespace, deps, scheduleCounts, relayEndpoints) {
 function createMeshRouter(deps) {
   const resolvedDeps = "meshCore" in deps ? deps : { meshCore: deps };
   const meshCore2 = resolvedDeps.meshCore;
-  const router13 = Router18();
-  router13.post("/discover", async (req, res) => {
+  const router14 = Router19();
+  router14.post("/discover", async (req, res) => {
     const result2 = DiscoverRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -129640,7 +129730,7 @@ function createMeshRouter(deps) {
       return res.status(500).json({ error: message });
     }
   });
-  router13.post("/agents", async (req, res) => {
+  router14.post("/agents", async (req, res) => {
     const result2 = RegisterAgentRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -129671,13 +129761,13 @@ function createMeshRouter(deps) {
       return res.status(422).json({ error: message });
     }
   });
-  router13.get("/topology", (req, res) => {
+  router14.get("/topology", (req, res) => {
     const namespace = req.query.namespace ?? "*";
     const topology = meshCore2.getTopology(namespace);
     const enriched = enrichTopology(topology, resolvedDeps);
     return res.json(enriched);
   });
-  router13.put("/topology/access", (req, res) => {
+  router14.put("/topology/access", (req, res) => {
     const result2 = UpdateAccessRuleRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -129690,15 +129780,15 @@ function createMeshRouter(deps) {
     }
     return res.json({ sourceNamespace, targetNamespace, action });
   });
-  router13.get("/status", (_req, res) => {
+  router14.get("/status", (_req, res) => {
     const status = meshCore2.getStatus();
     res.json(status);
   });
-  router13.get("/agents/paths", (_req, res) => {
+  router14.get("/agents/paths", (_req, res) => {
     const agents2 = meshCore2.listWithPaths();
     return res.json({ agents: agents2 });
   });
-  router13.get("/agents", (req, res) => {
+  router14.get("/agents", (req, res) => {
     const result2 = AgentListQuerySchema.safeParse(req.query);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -129707,17 +129797,17 @@ function createMeshRouter(deps) {
     const agents2 = callerNamespace ? meshCore2.list({ ...filters, callerNamespace }) : meshCore2.listWithHealth(filters);
     return res.json({ agents: agents2 });
   });
-  router13.get("/agents/:id/access", (req, res) => {
+  router14.get("/agents/:id/access", (req, res) => {
     const agents2 = meshCore2.getAgentAccess(req.params.id);
     if (!agents2) return res.status(404).json({ error: "Agent not found" });
     return res.json({ agents: agents2 });
   });
-  router13.get("/agents/:id/health", (req, res) => {
+  router14.get("/agents/:id/health", (req, res) => {
     const health = meshCore2.getAgentHealth(req.params.id);
     if (!health) return res.status(404).json({ error: "Agent not found" });
     return res.json(health);
   });
-  router13.post("/agents/:id/heartbeat", (req, res) => {
+  router14.post("/agents/:id/heartbeat", (req, res) => {
     const parsed = HeartbeatRequestSchema.safeParse(req.body ?? {});
     const event = parsed.success ? parsed.data.event ?? "heartbeat" : "heartbeat";
     const health = meshCore2.getAgentHealth(req.params.id);
@@ -129725,14 +129815,14 @@ function createMeshRouter(deps) {
     meshCore2.updateLastSeen(req.params.id, event);
     return res.json({ success: true });
   });
-  router13.get("/agents/:id", (req, res) => {
+  router14.get("/agents/:id", (req, res) => {
     const agent = meshCore2.get(req.params.id);
     if (!agent) {
       return res.status(404).json({ error: "Agent not found" });
     }
     return res.json(agent);
   });
-  router13.patch("/agents/:id", async (req, res) => {
+  router14.patch("/agents/:id", async (req, res) => {
     const result2 = UpdateAgentRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -129746,7 +129836,7 @@ function createMeshRouter(deps) {
     }
     return res.json(updated);
   });
-  router13.delete("/agents/:id", async (req, res) => {
+  router14.delete("/agents/:id", async (req, res) => {
     const agent = meshCore2.get(req.params.id);
     if (!agent) {
       return res.status(404).json({ error: "Agent not found" });
@@ -129754,7 +129844,7 @@ function createMeshRouter(deps) {
     await meshCore2.unregister(req.params.id);
     return res.json({ success: true });
   });
-  router13.post("/deny", async (req, res) => {
+  router14.post("/deny", async (req, res) => {
     const result2 = DenyRequestSchema.safeParse(req.body);
     if (!result2.success) {
       return res.status(400).json({ error: "Validation failed", details: result2.error.flatten() });
@@ -129772,11 +129862,11 @@ function createMeshRouter(deps) {
       return res.status(422).json({ error: message });
     }
   });
-  router13.get("/denied", (_req, res) => {
+  router14.get("/denied", (_req, res) => {
     const denied = meshCore2.listDenied();
     return res.json({ denied });
   });
-  router13.delete("/denied/:encodedPath", async (req, res) => {
+  router14.delete("/denied/:encodedPath", async (req, res) => {
     const filePath = decodeURIComponent(req.params.encodedPath);
     if (filePath.includes("..") || filePath.includes("\0")) {
       return res.status(400).json({ error: "Invalid path" });
@@ -129789,11 +129879,11 @@ function createMeshRouter(deps) {
     await meshCore2.undeny(filePath);
     return res.json({ success: true });
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/routes/a2a.ts
-import { Router as Router19 } from "express";
+import { Router as Router20 } from "express";
 
 // ../a2a-gateway/dist/agent-card-generator.js
 var DEFAULT_INPUT_MODES = ["text/plain"];
@@ -131426,9 +131516,9 @@ import express22 from "express";
 import express42 from "express";
 function jsonRpcHandler(options) {
   const jsonRpcTransportHandler = new JsonRpcTransportHandler(options.requestHandler);
-  const router13 = express4.Router();
-  router13.use(express4.json(), jsonErrorHandler);
-  router13.post("/", async (req, res) => {
+  const router14 = express4.Router();
+  router14.use(express4.json(), jsonErrorHandler);
+  router14.post("/", async (req, res) => {
     try {
       const user = await options.userBuilder(req);
       const context = new ServerCallContext(
@@ -131494,7 +131584,7 @@ function jsonRpcHandler(options) {
       }
     }
   });
-  return router13;
+  return router14;
 }
 var jsonErrorHandler = (err, _req, res, next) => {
   if (err instanceof SyntaxError && "body" in err) {
@@ -131547,7 +131637,7 @@ function createA2aHandlers(deps) {
 
 // ../../apps/server/src/routes/a2a.ts
 function createA2aRouter(deps) {
-  const router13 = Router19();
+  const router14 = Router20();
   const config = { baseUrl: deps.baseUrl, version: deps.version };
   const handlers = createA2aHandlers({
     agentRegistry: deps.meshCore,
@@ -131555,18 +131645,18 @@ function createA2aRouter(deps) {
     db: deps.db,
     config
   });
-  router13.get("/agents/:id/card", handlers.agentCard);
-  router13.post("/", handlers.jsonRpc);
-  return { router: router13, fleetCardHandler: handlers.fleetCard };
+  router14.get("/agents/:id/card", handlers.agentCard);
+  router14.post("/", handlers.jsonRpc);
+  return { router: router14, fleetCardHandler: handlers.fleetCard };
 }
 
 // ../../apps/server/src/routes/agents.ts
-import { Router as Router20 } from "express";
+import { Router as Router21 } from "express";
 import path36 from "path";
 init_logger();
 function createAgentsRouter(meshCore2) {
-  const router13 = Router20();
-  router13.get("/current", async (req, res) => {
+  const router14 = Router21();
+  router14.get("/current", async (req, res) => {
     try {
       const agentPath = req.query.path;
       if (!agentPath) {
@@ -131588,7 +131678,7 @@ function createAgentsRouter(meshCore2) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.post("/resolve", async (req, res) => {
+  router14.post("/resolve", async (req, res) => {
     try {
       const result2 = ResolveAgentsRequestSchema.safeParse(req.body);
       if (!result2.success) {
@@ -131611,7 +131701,7 @@ function createAgentsRouter(meshCore2) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.post("/", async (req, res) => {
+  router14.post("/", async (req, res) => {
     try {
       const result2 = CreateAgentRequestSchema.safeParse(req.body);
       if (!result2.success) {
@@ -131655,7 +131745,7 @@ function createAgentsRouter(meshCore2) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.post("/create", async (req, res) => {
+  router14.post("/create", async (req, res) => {
     try {
       const result2 = await createAgentWorkspace(req.body, meshCore2);
       return res.status(201).json({
@@ -131676,7 +131766,7 @@ function createAgentsRouter(meshCore2) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.patch("/current", async (req, res) => {
+  router14.patch("/current", async (req, res) => {
     try {
       const agentPath = req.query.path;
       if (!agentPath) {
@@ -131714,7 +131804,7 @@ function createAgentsRouter(meshCore2) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.post("/current/migrate-persona", async (req, res) => {
+  router14.post("/current/migrate-persona", async (req, res) => {
     try {
       const agentPath = req.query.path;
       if (!agentPath) {
@@ -131750,11 +131840,11 @@ function createAgentsRouter(meshCore2) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/routes/discovery.ts
-import { Router as Router21 } from "express";
+import { Router as Router22 } from "express";
 import { z as z32 } from "zod";
 var ScanRequestSchema = z32.object({
   root: z32.string().optional(),
@@ -131763,8 +131853,8 @@ var ScanRequestSchema = z32.object({
   timeout: z32.number().int().min(1e3).max(12e4).optional()
 });
 function createDiscoveryRouter(meshCore2) {
-  const router13 = Router21();
-  router13.post("/scan", async (req, res) => {
+  const router14 = Router22();
+  router14.post("/scan", async (req, res) => {
     const data = parseBody(ScanRequestSchema, req.body, res);
     if (!data) return;
     const roots = data.roots && data.roots.length > 0 ? data.roots : data.root ? [data.root] : [getBoundary()];
@@ -131808,11 +131898,11 @@ function createDiscoveryRouter(meshCore2) {
       }
     }
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/routes/templates.ts
-import { Router as Router22 } from "express";
+import { Router as Router23 } from "express";
 import fs24 from "fs/promises";
 import path37 from "path";
 
@@ -131939,9 +132029,9 @@ async function writeUserTemplates(catalogPath, templates) {
   await fs24.writeFile(catalogPath, JSON.stringify(catalog, null, 2), "utf-8");
 }
 function createTemplateRouter(dorkHome) {
-  const router13 = Router22();
+  const router14 = Router23();
   const catalogPath = path37.join(dorkHome, USER_CATALOG_FILENAME);
-  router13.get("/", async (_req, res) => {
+  router14.get("/", async (_req, res) => {
     try {
       const userTemplates = await readUserTemplates(catalogPath);
       const templates = [...DEFAULT_TEMPLATES, ...userTemplates];
@@ -131951,7 +132041,7 @@ function createTemplateRouter(dorkHome) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.post("/", async (req, res) => {
+  router14.post("/", async (req, res) => {
     try {
       const result2 = TemplateEntrySchema.safeParse({ ...req.body, builtin: false });
       if (!result2.success) {
@@ -131975,7 +132065,7 @@ function createTemplateRouter(dorkHome) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  router13.delete("/:id", async (req, res) => {
+  router14.delete("/:id", async (req, res) => {
     try {
       const { id } = req.params;
       const isBuiltin = DEFAULT_TEMPLATES.some((t2) => t2.id === id);
@@ -131995,11 +132085,11 @@ function createTemplateRouter(dorkHome) {
       return res.status(500).json({ error: "Internal server error" });
     }
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/routes/admin.ts
-import { Router as Router23 } from "express";
+import { Router as Router24 } from "express";
 import { spawn as spawn3 } from "child_process";
 import fs25 from "fs/promises";
 init_env();
@@ -132018,15 +132108,15 @@ function triggerRestart() {
   }
 }
 function createAdminRouter(deps) {
-  const router13 = Router23();
+  const router14 = Router24();
   const adminLimiter = rate_limit_default({
     windowMs: 5 * 60 * 1e3,
     // 5 minutes
     max: 3,
     message: { error: "Too many admin requests. Try again later." }
   });
-  router13.use(adminLimiter);
-  router13.post("/reset", (req, res) => {
+  router14.use(adminLimiter);
+  router14.post("/reset", (req, res) => {
     const { confirm } = req.body ?? {};
     if (confirm !== "reset") {
       res.status(400).json({
@@ -132045,7 +132135,7 @@ function createAdminRouter(deps) {
       triggerRestart();
     });
   });
-  router13.post("/restart", (_req, res) => {
+  router14.post("/restart", (_req, res) => {
     res.status(200).json({ message: "Restart initiated." });
     setImmediate(async () => {
       try {
@@ -132055,7 +132145,7 @@ function createAdminRouter(deps) {
       triggerRestart();
     });
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/services/extensions/extension-manager.ts
@@ -138920,7 +139010,7 @@ function createExternalMcpServer(deps) {
 }
 
 // ../../apps/server/src/routes/mcp.ts
-import { Router as Router24 } from "express";
+import { Router as Router25 } from "express";
 
 // ../../node_modules/.pnpm/@hono+node-server@1.19.11_hono@4.12.5/node_modules/@hono/node-server/dist/index.mjs
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
@@ -140180,8 +140270,8 @@ var StreamableHTTPServerTransport = class {
 // ../../apps/server/src/routes/mcp.ts
 init_logger();
 function createMcpRouter(serverFactory) {
-  const router13 = Router24();
-  router13.post("/", async (req, res) => {
+  const router14 = Router25();
+  router14.post("/", async (req, res) => {
     try {
       const server = serverFactory();
       const transport = new StreamableHTTPServerTransport({
@@ -140207,7 +140297,7 @@ function createMcpRouter(serverFactory) {
       }
     }
   });
-  router13.get("/", (_req, res) => {
+  router14.get("/", (_req, res) => {
     res.status(405).json({
       jsonrpc: "2.0",
       error: {
@@ -140217,7 +140307,7 @@ function createMcpRouter(serverFactory) {
       id: null
     });
   });
-  router13.delete("/", (_req, res) => {
+  router14.delete("/", (_req, res) => {
     res.status(405).json({
       jsonrpc: "2.0",
       error: {
@@ -140227,7 +140317,7 @@ function createMcpRouter(serverFactory) {
       id: null
     });
   });
-  return router13;
+  return router14;
 }
 
 // ../../apps/server/src/middleware/mcp-auth.ts
@@ -140490,6 +140580,17 @@ async function start() {
     app.use("/api/relay", createRelayRouter(relayCore, adapterManager, traceStore));
     setRelayEnabled(true);
     app.locals.relayCore = relayCore;
+    relayCore.subscribe("relay.human.console.>", (envelope) => {
+      eventFanOut.broadcast("relay_message", envelope);
+    });
+    relayCore.onSignal("relay.human.console.>", (_subject, signal) => {
+      const eventType = signal.type === "backpressure" ? "relay_backpressure" : "relay_signal";
+      eventFanOut.broadcast(eventType, signal);
+    });
+    eventFanOut.broadcast("relay_connected", {
+      pattern: "relay.human.console.>",
+      connectedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
     logger.info("[Relay] Routes mounted");
   }
   if (meshCore) {
@@ -140577,6 +140678,9 @@ async function start() {
       );
     }
   }
+  tunnelManager.on("status_change", (status) => {
+    eventFanOut.broadcast("tunnel_status", status);
+  });
 }
 async function shutdownServices() {
   logger.info("Shutting down services...");